3:57:25 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x244601, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x7]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x850f, 0x7f, 0x401, 0x9, 0x100]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000c0c0}, 0x800)
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x8001, 0x7, 0x5, 0x80000000, 0x7, 0x2})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@ng={0x4, 0x13, "1c7a522275"}, 0x7, 0x2)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  407.430124] protocol 88fb is buggy, dev hsr_slave_0
[  407.435955] protocol 88fb is buggy, dev hsr_slave_1
[  407.511227] protocol 88fb is buggy, dev hsr_slave_0
[  407.516472] protocol 88fb is buggy, dev hsr_slave_1
[  407.534521] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "obj_type=numa_maps"
[  407.600145] protocol 88fb is buggy, dev hsr_slave_0
[  407.605397] protocol 88fb is buggy, dev hsr_slave_1
23:57:26 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x20040, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x2000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x9c, 0x69988554, 0x3006, 0x7, 0x1, 0x0, 0x3, 0x6}})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, {0x0, 0x40, 0x0, 0x0, 0x8, 0xfd}, 0x3, 0x2}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x40ac3)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x231, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x6, 0x3})
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:26 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x2000000000000000, 0x4, 0x22, 0x1, 0xb})
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x862851a748f58fed, 0x0)
timerfd_gettime(r2, &(0x7f00000000c0))

23:57:26 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x244601, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x7]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x850f, 0x7f, 0x401, 0x9, 0x100]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000c0c0}, 0x800)
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x8001, 0x7, 0x5, 0x80000000, 0x7, 0x2})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@ng={0x4, 0x13, "1c7a522275"}, 0x7, 0x2)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:26 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x818)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:26 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:26 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x0, 0x0, 0x7, 0x1, 0x3}, 0xff, 0x10001, 0x5})

23:57:26 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x100)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = gettid()
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0xffffffff, 0x0)
tkill(r0, 0x3c)
inotify_init()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x880, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000300)=0x10000)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x20, 0x1, &(0x7f0000000180)=0x101})
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000240)={0xc000000, 0x7ff, 0x12, "afd2f89473d2617a654e2aa6f2c40a777bcc2a29ea91bb9df3e2d2ed360e541d709f5f8cbd1fb273c9c86f452d10836b0e591dbef852cbec49420707", 0x32, "fe0d5f1cafdf5199ee8b515307a6df67ac21f31821d7ee33e4c88d684f114246394e6e8c333f58e50f340f599dafc24d12c213f078696a7021f734b3", 0x50})
ptrace$cont(0x20, r0, 0x0, 0x0)
ptrace$getregs(0xc, r0, 0x1, &(0x7f0000000080)=""/139)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r5, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:26 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x2, 0x651c2dc98874a506)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
r3 = fcntl$getown(r2, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r6}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r5, 0x0, 0x5, &(0x7f0000000040)='ppp0\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0x13, &(0x7f00000002c0)='/dev/btrfs-control\x00', r6}, 0x30)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x329, 0x0, &(0x7f0000000380)="a6833c15ce9573f3ce05d1a282ee", 0x0, 0x57d}, 0x28)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2104a001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250700000014000600fe8000000000000000000000000000bb1400050000000000000000000000ffffac00030000000000040001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x48044)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)

23:57:26 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x100000}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x2}, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x20040, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x2000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0x9c, 0x69988554, 0x3006, 0x7, 0x1, 0x0, 0x3, 0x6}})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, {0x0, 0x40, 0x0, 0x0, 0x8, 0xfd}, 0x3, 0x2}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x40ac3)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x100)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1904080}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010b27bdc2bf4dcb2f94c5c1dc38078b2b8edc7000fedb0200"/41], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20040855)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:26 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = socket(0xa, 0x3, 0x1)
getsockopt(r5, 0x97, 0x0, 0x0, &(0x7f0000000780))
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r7, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000140)={0x50, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x0, 0x7, [{0x0, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8ca}]}, 0x50}, 0x1, 0x0, 0x0, 0x6f159f8331a05811}, 0x4008800)
r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x1080, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, 0x0, 0x0)
preadv(r11, &(0x7f0000000d40)=[{&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/152, 0x98}, {&(0x7f0000000c80)=""/179, 0xb3}, {&(0x7f0000000900)=""/125, 0x7d}], 0x7, 0x40)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="00032dbd7000fcdbdf25020000000c000400d10eb6a8ffffffff0c00050028010000000000000c00020004000000000000000c00060002000000000000001400070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB=',\x00\x00\x007\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="4800010090aeb159810a00000086dc0133716505aaaaa9ce18aaff2f8815c43bbd33751d83c68af69afe5e78614ce3a2df462d928532460079702aec29504f8a4cce65772c46fe5fc16f55c3a4d8ea404635dfa31c3aca9c4c9caf462eb7fc054bca0cd9a3cfe8595f116570732610a42013b7615c7694260105c77995c5f7f54e0f98dbff42576cf5684bb29116ef3cc2cc7e5051e21f", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100000000000c00020001000000ffffffff"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x2)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r12 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r13 = dup2(r12, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r13, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:26 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:27 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="f0a10e2837d2db421616cd3e63eb685c", 0x10)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r7, @ANYBLOB="012001004000000008001c00ef000000d90a440d99b4a1f863f4caa6a3badfe60ab68b61cffe61a780078e3ca2b38d"], 0x28}}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast2, r7}, 0xc)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x4, {0x0, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x202}, 0xffffffffffffffa4)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getpgid(0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
r4 = pkey_alloc(0x0, 0x0)
pkey_free(r4)
pkey_mprotect(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x8, r4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xf, "590c48c0b72026663703fd156d4431"}, &(0x7f0000000080)=0x17)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x800, 0x86b00)

23:57:27 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:27 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x5, 0x4)

23:57:27 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x100000}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x2}, 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/105)
ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x230ea2d758f11a77}, {r2, 0x38e1}], 0x2, 0x0, 0x0, 0x271)

23:57:27 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
epoll_create(0x0)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  409.062213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
23:57:27 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x34, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r4, 0xffffffffffffffff)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:27 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0))
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0xd48a5a656600d03e)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/40, 0x28}], 0x6, &(0x7f00000004c0)=""/180, 0xb4}, 0x40002131)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000002780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0x98, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40040d0)

23:57:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {}, 0x0, 0x1}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000080)=0x100, 0x4)

23:57:27 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x3, 0x2)
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:27 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rootfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100))
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r2, 0xb)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
prlimit64(r3, 0xf, 0x0, &(0x7f0000000140))
shmat(r2, &(0x7f000000c000/0x4000)=nil, 0x3000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00')
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x401, @bcast, @bpq0='bpq0\x00', 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
ioctl$RTC_WIE_ON(r2, 0x700f)
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080)="b46608155c1ada3ece7173ca6f742622949084f6de3f032fe360cca3b910614e01c1b3f599cbdfba4bede250f0f08ea0afc962684b27f2039a5cc26c85d03c28519eb2ceda96764de1d48cfd0746e2c98ebaf1e6d7964e95554bda286e40ada887ffd2295bae3e87a7d7561c4035a1e8d69b7f1ab6", &(0x7f0000000100)="16b3dfbdef07bf3c888a4343363636ec05b252e87002d3a80f763aaf8b7c9dd896625dd743da7953a9f277ef3690e8e649083bc430cc375708cc44774d4d02b73caa4239956a0dc80f8f14522f68a2bd42fdbeb2735ef3c8b211cf81c2ae5ecf02a98540438c27361b2b2e5d728ca89762b103b4c1fb3c5e3e95bb71d532173e32cee69b1540dd4f5082595593a6c57062b98c39aedce5eccaaa47375971e176c815106dd76020674ac02e41c1", 0xc6cfee5b7d51c57b}, 0x20)

23:57:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
ioctl$KDADDIO(r1, 0x4b34, 0x9)
preadv(r1, &(0x7f00000017c0), 0x0, 0x100000000)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'ip6_vti0\x00', 0x200})
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:27 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x418}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:27 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x84, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x54, 0x25, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x98}, @NL80211_TXQ_ATTR_CWMIN={0x6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xfffe}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x400}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x20}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048884}, 0x20000000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x6a, @empty, 0xffff0000}, @in={0x2, 0x4e20, @rand_addr=0x40}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @remote}], 0x5c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:28 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
connect$netlink(r2, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40080044}, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'rose0\x00', {}, 0x3})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x200)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:28 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$NBD_SET_SIZE(r4, 0xab02, 0x9)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:28 executing program 3:
r0 = request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='cpuset*\'self-\x00', 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, r1)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$clear(0x7, r2)
keyctl$describe(0x6, r2, &(0x7f0000000180)=""/214, 0xd6)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40000, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000280)=0x7, 0x4)

23:57:28 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100))
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={r2, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000840)='net/fib_trie\x00'}, 0x30)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000280)='net/netstat\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0xa, r5, 0x0)
getpgid(0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0))
r6 = gettid()
ptrace$setopts(0xffffffffffffffff, r6, 0x0, 0x20)
tkill(r6, 0x3c)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r6, 0x7, 0x20000000000000)
ptrace$cont(0x1f, r6, 0x4000000005, 0x7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r7, 0x0, 0x0)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r9, 0x10d, 0x6, &(0x7f000079bffc), &(0x7f0000000200)=0x4)
r10 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r10, 0xffffffffffffffff)

23:57:28 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x40, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="e06ac1c0fd65394db58902fd0dde7a49fad4c844a4885ecdc9892f59758d9d67578dd4cc43df0146f9ef3132feee35f4e350e634cf88203a54063b44e693fab899c51e35dd280a693a7a43ad9d1799f7cbb9f93e42967bbcaffb8e7e5d5d093e8efe4d0f407452520e3bc5f0eebf11610cf6bf504a71c5660fe390143e7c8e683636cb74940349bedc", @ANYRES16=r3, @ANYBLOB="02002abd7000ffdbdf25010000000000000008410000004c00180000020073797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x455a2694968728d0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:28 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
readv(r0, &(0x7f0000000040), 0x0)

23:57:28 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
readahead(r0, 0x9, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r1, &(0x7f0000000100), 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r1}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:28 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xf9}, 0x8}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000480)={0x0, 0x7fffffff, 0x7a2, [], &(0x7f0000000440)})
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40, 0x0)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x96, 0x0, 0x7fff, 0x3ff}})
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000400)={0x334f12473f21581, 0x5, 0x4, r3, 0x0, &(0x7f00000002c0)={0x9909db, 0x5, [], @p_u32=&(0x7f0000000280)=0x2}})
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:28 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8e7704848c91a788, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200cc01}, 0xc4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/195)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18404000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000e7a2673d83fa12dd5cdbb59a2feb2d9f588f17e246a7c6ad87b57f13c31d", @ANYRES16=r4, @ANYBLOB="020425bd7000ffdbdf2508000000080004000000000008000c00030000000800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x80)

23:57:28 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
init_module(&(0x7f0000000080)='\x00', 0x1, &(0x7f00000000c0)='numa_maps\x00')

23:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:28 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:28 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
syz_open_pts(r2, 0x0)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:28 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8e7704848c91a788, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200cc01}, 0xc4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/195)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18404000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000e7a2673d83fa12dd5cdbb59a2feb2d9f588f17e246a7c6ad87b57f13c31d", @ANYRES16=r4, @ANYBLOB="020425bd7000ffdbdf2508000000080004000000000008000c00030000000800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x80)

23:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x2, 0x0, 0x0, 0x3, 0x0, 0x3f}}, 0xe)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)

23:57:28 executing program 3:
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)

23:57:28 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000d40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r5, 0xffffffffffffffff)

23:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:28 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8e7704848c91a788, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200cc01}, 0xc4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/195)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18404000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000e7a2673d83fa12dd5cdbb59a2feb2d9f588f17e246a7c6ad87b57f13c31d", @ANYRES16=r4, @ANYBLOB="020425bd7000ffdbdf2508000000080004000000000008000c00030000000800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x80)

23:57:28 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
gettid()
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='setgroups\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:28 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xc60e, {0x0, 0x3, 0x81, 0x9, 0x3, 0x9}, 0x800, 0x4}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:28 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:28 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000d40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r5, 0xffffffffffffffff)

23:57:29 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = socket$kcm(0x11, 0x8000000002, 0x300)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x23})
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:29 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=<r1=>0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
dup(r0)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000000000)=0xc)
setuid(r5)
r6 = geteuid()
syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffa, 0x7, &(0x7f0000000b40)=[{&(0x7f0000000280)="e52be5771eafe73c09010ff610ff2e54e8615d357bffe4985deabea5b6c6dc4139fa0877a2d95bf12108515daf2b2e5204def7f7de181f997c56353bc4bb0b89f79e3f4f639484f877030e76e19395de7d14339d9f989f37b0522651584dd978a91815b70da3aeee58fcc9d588c1a0c93433ef0187bfb4", 0x77, 0x2f}, {&(0x7f0000000340)="eab269fe9186675eed8ecf174c84f740e0cd0f4daf55995ed7452f737e77bedd31d547590d91c9fd9af142f66a65d0dfaa1cea74115f849d9a9403ea3f5c36b6cf7315abdf588b0d72f3b6068218c6275b1d1a7408655f8d844186b49a1adae725fbe223398aa6465ee953d165fda91cd11953ef7980f217440d1a38ad7c358e50daac42fda4dfa39e8113a3713c818ca4253b2d129345b6c0196067a45524fe570ae52c69bf6235aaa6ecfba6c9f42368d4446213c582005ea94d72350f", 0xbe, 0xffff}, {&(0x7f0000000800)="359fca1b1c04272cb511d8a90cc19c2ca024a760975fe269936c33ccc77892a8d3fa3408b9eb1a4cc30e096b84ffac8d8d8cb39ab9fb565ae1ca6ebe23a8fdf45b4debc778381d70a14087f3b4c7f94ebc5ab23d", 0x54, 0x100000000}, {&(0x7f0000000880)="bb7f018d86642a36d9a8752baf3c589ad5f8c6500f15951ca860d011c11808b0bb2b1fa5522260ba8371a7ae58a43372337003828328080f57a6a56ba8142c75793fdf31c4a4e3fa6763b54dd319c6584e588bf276c73ff08edb31fd3a70bb083ca57419758c51e7aad6a0e273a62a1b2b29f989e4f03f70368460dc6f235296b87b4886ce710f5f2ac74515b984333ea0ad4ecaca17ff370a4f831da4d74d6736b08b383272c8ee13f0fb258bf605b6f507345e930ff8", 0xb7}, {&(0x7f0000000940)="50c7bba8d936a2339d70978e3652f4ca6948c75c2a05beb8d9bf80c75c85bd17800d5e5a9eae95de1149e42aa95ebfc1659d3cc79670b183268b3444a768407fd656494cf1c6c068281ea2f0108b8f777eba4f5bb7b2dfacb68283b2201f43c4f4663e84e71f4dd9eb1ddd48290545b11a8f7070e1e06edee7ad48ff2f9261c2a2c4f89acef010523f55944fe78539b761dcca139db777f31862712541e6231a72d4e9185526e4b9beaa555ebadc1925e4cc68c0420ead78769043e18d6f5689510974b7376b7c9bf6c288fcacbcf98a975afc1808cdc85525a97904af6a109ca86dc847f4acb41de96434b46c5537f8c7c7e829c8cf", 0xf6, 0x1000}, {&(0x7f0000000a40), 0x0, 0x40}, {&(0x7f0000000a80)="b26a20575443371c24635b015e994f039a42c6bb8c8d5cdaf6d3082991d4acabb3808874ebc55a027994d2e15afd58e2504759861247912ab7a14690fc363acca02ab361fab841ea8c98f376ec156e200087010c837cbf5c3ff64cf72eb1e6e865a19dcf752f28ae49f312cb1174d3e892e674382af37303d4c28d64cc2fcb365720cab8a1701955766abd475729a24e619a87a2c92b66546e1d5ccba0231ca129f10ae750f023", 0xa7, 0x1}], 0x8000, &(0x7f0000000c00)={[{@qnoenforce='qnoenforce'}, {@uquota='uquota'}, {@uqnoenforce='uqnoenforce'}], [{@euid_eq={'euid', 0x3d, r5}}, {@uid_gt={'uid>', r6}}, {@subj_type={'subj_type', 0x3d, '^'}}, {@appraise='appraise'}, {@appraise_type='appraise_type=imasig'}]})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r7, 0xffffffffffffffff)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:29 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@remote}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

[  410.827769] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 35 (only 16 groups)
23:57:29 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:29 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)={<r3=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r3, 0x9})
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r4, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc)

[  410.930595] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 35 (only 16 groups)
23:57:29 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @mss={0x2, 0xfffffa48}, @mss={0x2, 0x25e3}, @sack_perm, @mss={0x2, 0x7f}], 0x5)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x3f, 0x40)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000100)=0x9)

23:57:29 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
readv(r0, &(0x7f0000000080), 0x95)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x4, [], "4379d98fc671db622c983f20a2640d86"})

23:57:29 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x200000005, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x80, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r1, &(0x7f0000000100), 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r1}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:29 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=<r1=>0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
kexec_load(0x2, 0x0, &(0x7f0000000080), 0x140000)

23:57:29 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})

23:57:29 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x200000005, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = dup(0xffffffffffffffff)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r5, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)

23:57:29 executing program 3:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x501400, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0))
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0xfffffffffffffe91}], 0x1)

23:57:29 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0))
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
dup2(r2, r0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:29 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0xe)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0)
setfsgid(r1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:29 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x3}}, 0xe)
socketpair(0x70, 0x800, 0x84, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), 0x4)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:29 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20005000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x154, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdafa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xd}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x50, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xee}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})

23:57:30 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})

23:57:30 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000000000)=0xc)
setuid(r3)
r4 = socket(0x9, 0x2, 0x5)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000000000)=0xc)
setuid(r5)
setresuid(r3, 0xffffffffffffffff, r5)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:30 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x800, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140))
ioctl$KDMKTONE(r2, 0x4b30, 0x8000)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80a780, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:30 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0xfffffffffffffdbf, 0x2, 0x3, 0x100, 0x70bd27, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24000002)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78)
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x21)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r5, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x882, @local, 0x1}, {0xa, 0x4e22, 0x0, @local, 0x3}, r5, 0x9}}, 0x48)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  412.000197] net_ratelimit: 24 callbacks suppressed
[  412.000651] protocol 88fb is buggy, dev hsr_slave_0
[  412.011875] protocol 88fb is buggy, dev hsr_slave_1
23:57:30 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})

23:57:30 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  412.101166] Unknown ioctl 19248
[  412.112904] Unknown ioctl 19248
23:57:30 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x5, 0x7ff, 0xc21}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r3, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:30 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0xfffffffffffffdbf, 0x2, 0x3, 0x100, 0x70bd27, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24000002)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000180)=0x78)
r3 = creat(&(0x7f0000000440)='./file0\x00', 0x21)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f}}, 0xffaf)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480), r5, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x882, @local, 0x1}, {0xa, 0x4e22, 0x0, @local, 0x3}, r5, 0x9}}, 0x48)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:30 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r6, 0xffffffffffffffff)

23:57:30 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x26}, 0x8}, 0x1c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0x8000000)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0)
r3 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0)
shmdt(r3)
shmdt(r3)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:30 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0))
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
r6 = getpgid(r1)
ptrace(0xc, r6)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa0080, 0x0)
bind$isdn(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x20, 0x6, 0x5e, 0x40}, 0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x60001000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004080)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xa00000, 0x3db8, 0x7, r0, 0x0, &(0x7f00000000c0)={0x9e0001, 0x0, [], @p_u8=&(0x7f0000000080)=0x81}})

23:57:30 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={<r3=>0x0, 0x78, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x5}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e22, 0x80000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xf7}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x40, 0x40}, &(0x7f0000000200)=0xc)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2)
ppoll(&(0x7f0000000000)=[{r0}, {r1, 0xa}], 0x16, 0x0, 0x0, 0x1cd58374e4c8c2ee)

23:57:30 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:30 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x100, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8020000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0xa0000, 0x0)
sendto$phonet(r2, &(0x7f0000000800)="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", 0xfa, 0x4000000, &(0x7f00000001c0)={0x23, 0x4, 0x1, 0x80}, 0x10)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:30 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)

23:57:31 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = getuid()
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2})
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r3, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

[  413.030119] protocol 88fb is buggy, dev hsr_slave_0
[  413.035255] protocol 88fb is buggy, dev hsr_slave_1
23:57:31 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_tables_targets\x00')
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001680)=""/4102, 0x1006}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/181, 0xb5}], 0xfffffffffffff57)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xff, 0x4)

23:57:31 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x181, 0x20)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x6, 0xa, 0x1, "a9e466f3bc0cbff95fbff217f0679a6a3012168f889d0401e94d33c9ffed4b82", 0x34424752})
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)

23:57:31 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x3, 0x0, 0x4, 0x2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00'})
r1 = gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r1)
r2 = socket$inet(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071")
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r4, &(0x7f0000000100), 0xe)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r4, 0x2422}, {r5, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:31 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)

23:57:31 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/softnet_stat\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f00000000c0)='net/ip_vs_stats\x00')
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x57}], 0x1)

23:57:31 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x2)

23:57:31 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0)
name_to_handle_at(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x8a, 0xb18, "7e629f27b4214ce5e0a64f7482dce896335e214d88dc87912cedfbee5870ba66efe771e4aacd4577be08dc292637951f82abc048c53146d9a85ed0d955343b71f58b800519a98bf37412a5fb21a796c589854d13be30a661e0b3b36e502d6626a2471d16144d8191d98eda683ec84f145bda8679056f8c719b3d9ff2a68b4023c298"}, &(0x7f00000002c0), 0x1000)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x181, 0x20)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x6, 0xa, 0x1, "a9e466f3bc0cbff95fbff217f0679a6a3012168f889d0401e94d33c9ffed4b82", 0x34424752})
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:31 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x400080)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x1000})
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x40, {0x0, 0x1, 0x8, 0xff, 0x0, 0x3}, 0x0, 0xc3}, 0x9)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

[  413.600112] protocol 88fb is buggy, dev hsr_slave_0
[  413.605454] protocol 88fb is buggy, dev hsr_slave_1
23:57:31 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:31 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
sendmmsg$nfc_llcp(r2, &(0x7f0000001780)=[{&(0x7f0000000280)={0x27, 0x0, 0x2, 0x0, 0xa7, 0x7f, "84b2a5ddab120dee4daecbfbc98e7820cee999022954698fce611fdb60c710414b4273848acc1b38c789ebfd36b2c48d6cbbaac7826073e38dac4fc4633cbd", 0x4}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="9da9750f84b0977ad3b6d88ff1c1e5942b74d2b6239bb95bf5203f70903836b234294f3162b9987d9f9f0dab29", 0x2d}, {&(0x7f0000001940)="9e58eca44e041ddc8f19d935936e49b872922c1faa9d7011707b354ff61ac4e9fdba4c9a83338b611c166cb02995e11dcf0d879fab3bc57dc7c90c7c6da743a45b9044fc68616dd458a102a09c8b1502fc701f4fa4c13b03ed247011386cd012e60129b0be6260283295a081545cd549f1820c4a489f43db757f9a424757156a1a9c4eacedfa8b56a96675f8ac97474f0db290146f3c0b46267cb0b4bab582bb4d5c68055b08ea2ae4416057b3", 0xad}, {&(0x7f00000003c0)="5472796b5736c2a2bc88", 0xa}], 0x4, &(0x7f0000000900)={0x108, 0x6, 0x9, "d8a1e61cd96d51f49026dda0b1dee41c68a7b4ced3cca278186b13ee03d99f3725bea40c80c4a23820a6da0fa177195220c374b5c44aa2e64963915462296aeef6af2e022d1f2396b1c95683bedf615ac3173b4f0cf125fb08b4e884a9bba847a272fabdaffe4ee46547fbd4950fe7e0f019d9cfda5d194aa1f0f0ba78f2b926e72361e317c133a5a459647dd3c2ccfd94ad1500550dc21c06d82575e4f490ca48e85c0d3ede8f727c0eb234fa703775f8cced31a8c8a98da20f4fa5756e3cf185991fa6a39df51a752a4e65d283594c7b279e5041373f0a38ef5e94bfc26321f66199f932e747e6f92c2091e70479e285ee0bc4e5cd"}, 0x108, 0x4000000}, {&(0x7f0000000a40)={0x27, 0x1, 0x0, 0x4, 0x9, 0x64, "ce9630f0383afd870502f4a0b58d052c5c25694862f21c832602e56d598bfea0c28155abd7d04cff2aaccb61da3cdb51f2835f547e1f841cfcce7c59deb628", 0x38}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="3fc27528d24ca0c0337891bccd8ab9aaa13be63a183f6a9550fdd51a40ebdbab51a386c36f8e41b3535243b1512221c7e9d923c7ee35e97b0cd4786b51948e9201dbb863915c34f8535b79c9fecf7ea4c3d614e359e1d15d8bab711dd64521a9016f4d622c22114539bfd0ba", 0x6c}], 0x1, &(0x7f0000000b80)={0x70, 0x1, 0xa260, "7ee363849f24e386090b6a5418f8df2d4a41a567da0ab783ac453a2a459b4307d6e6770ada5bfb9692b55b7c7fe281729b375493d9996968abb41bb8dbed57ea3ca3b5cb963e51d3a517548419ec3d94a202e30eed1e84f6ed5de0908e749d"}, 0x70, 0x14}, {&(0x7f0000000c00)={0x27, 0x1, 0x0, 0x3, 0x1, 0x2, "81a997eed8e0da52a15e45a40bcb64bd9bff62e251dfb48e2a7c6a56c9a201d288f08eb2d8651ca9c70e30837c8b001573d3df5be584c0bdfd141c3cd63473", 0x6}, 0x39e, &(0x7f0000000d40)=[{&(0x7f0000000c80)="5e95dcafe4bdb6fb1bff7c9c2b96c9fe479025d0307aed55b6e992244e8e552e38787436d41fadb3fac82d32a94472742dcc8781f0c4e79adcd027aa1428ba791b60a6f8e82b74efc8cd54ebe87d44226890747aa23a2fab76f2a930e6441e90a00e0037baa9e2f425f1ca4ceba9ff06d6c1f8d74a058c5e3a7d450dcf7ca77bc593db2a49dcbbcd32e2133d3903d61f5be2db809cf62187099e6cd5b90ae2c8bde186a2036538dc41304c32c1645eeef8448e17704758", 0xb7}], 0x1, &(0x7f0000000d80)={0x80, 0x109, 0xb4, "ae05bc582143cc6e258447897903000000c1e337fcb684db29a717222b7c3eaedae312122de33b2ee36dfeffd569b73df4df4be90e2a1eb22c994f9242797c98a99ca8c2b350de91ef5724d819b7589a7b0ec723274cdb6be942e077a12b4feb17e83fbfbba1a8092d447570"}, 0x80, 0x4604418b}, {&(0x7f0000000e00)={0x27, 0x1, 0x2, 0x1, 0xe, 0x3, "2acacf0c83a6fba47ee1566fe076335d725711220e56d04b5fd68f17e612cd251b131f7ae0f9b6de721252529e06eb1fde71f05e75a1574bee4eb880f1b72f", 0xf}, 0x60, &(0x7f00000010c0)=[{&(0x7f0000000e80)="879bdca440b251d53cff7526468a3c79c98e954bccbe1738f700e00d12a306eccdccf97abf2b5ace55a4c89b8e737354f77eca26995f020c92e4863522e21640321763cee24bbf7f51c5a70a7bfe2b453fb18c31b9e391b56a7c2582bd4b16162a05782c00a70013486e3b1750be9fd9ce729306c5b3f4b4a5f32ba81827100f0465edad808c3fae927aa938e9dffafda3f8103e898f9750b79b04f419a2594608c519d2f8106a088b2ce67e4aa80e519419025f765911f21a77b67c", 0xbc}, {&(0x7f0000001a00)="e9855e816d7765cf6f3c433a502d7c9542c9f14bb09dde729a128a3d6efcc8348b4b7fdfb366b90e985842e3716e3180ac42fdc891b01c06229081ff84a28f059830aca5e2827b73e06d6bf0eb7c0ee06648e6d65ae94d81cd7cb8c4080170d4193596c0785f0af81b0f175bc2e89240fd0e55d597e795e465b01e62a9223177d88cd3bffa72cb20666b80dccbc339535d99be6bd88b1585dbe68aedad51076bd94afc09ad748653b639b2069ea7adfa52d70e3d75e384", 0xb7}, {&(0x7f0000001000)="5f9066938f6c7abce184c1ea01e1d821a4f30111cf6404ef4f4efcd89ea6d1f00bf741e18687bcb1f4d7a22de1b46f6a6ff49e6f306a7d6e551132a88fed827a007bd19533e8cd0d35c20c8cbbcf81a2378ec819071dc1f2af1e50ae10e90d4241b944d51890e23ba9df84fa8e88564171c72fe38619fe881dfb53f2d97c3c364667bb4e44d844f8b7e1fe5314e04fa193d8c1676c67b01fd5f5d708ad4542edf111ec8ffaef37d6295c0ab75ca492ef8b0e9454604764301ba88e", 0xbb}], 0x3, &(0x7f0000001100)={0xc0, 0x10e, 0x3f, "5cc1b7c507d5c426bfb9f4107f2f597d8aee82a93a85809404136024f6daf97562ab8adcebc1da5cb133388e813468e048d66c8cbf4bb719bf1842ae9ac81ed189fda03e52d8ce83fa1fda07e363f886071e20ec0d74bda8d915e42810971b531e3147971df896981672400dcbc76e3d269185bf961eeb8ff2b1ea85469482e78111d9a8a336f1b617cc8f350cb73fa13c88bf816f7475cedfa7ef29172126e05c9eddedbf7b88eb79a323cf16"}, 0xc0, 0x80}, {&(0x7f00000011c0)={0x27, 0x1, 0x1, 0x2, 0x9, 0x2, "5710a4b91e55ed0ea1436d3cd81c828528413f69253db82822d9fae829f7b71d2df90a5c88ec92e30fce0f48ad13765a79617f432107e690183e0cddbde897", 0x13}, 0x60, &(0x7f00000012c0)=[{&(0x7f0000001240)="0d6af589a7f171808021418b3fc0cfcf4cf90caa68799f65b2a40da7b6cb2859a7e064a7ce6212dca8aa83aba91df368709285a303f6302d1c5051e07036b8817aea405378f49a739c4f3786a955862ba947cc73048284466779abe616c478eb", 0x60}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="e80000000000000000000000080000001ea3c05c65965cd25e95811dab5bfbb0c998c4622789a15a911868cff176542d067175dc343d84beb0877f2c5b29ab8cc728b2ee154ac80149aee6e4d4113cb93b77d5d3988251df5c08e4ee5ae44d2aa3a22006a31327e6a831552029acd6e0479c2df2f17d26e55ec33f6c1657f907796107a6d48971803828e45ddd91768674b0de63c0e8c4e94abcc134b0c41b65009e72179220be0c892b2f8512ceb0aac985d1d668bab0377799025e0f7b107861681dda87a99e9f99f38733b913eb71d8d173b7f722fe7c3dbe732549034f16fb5679b420369900"], 0xe8, 0x4004}, {&(0x7f0000001400)={0x27, 0x0, 0x0, 0x0, 0x7, 0x40, "e04ff60c4e5727d6242ce98f0a7047faacf6ef2cbdfda3e935a0e28fa1f7b23f5fa84fa0e2821497151739f27eb31986eb485990a623cb5a7c55499ef26c68", 0x3a}, 0x3d, &(0x7f0000001640)=[{&(0x7f0000001480)="98ce5a58d03c22f9e7ad402587d0121fb07e8ff1056a44dea8c624839c5c7711fc1053c3f80627f8cccfdf3da26e493ce290e66e2de3c54970bb6569b0727e8ec52f1a5e994b16a0d1c71dcacc52678173990d5a88c3fbb4ca6ff727b8d3e13bd43e31239db96ac83f1340d732bd9fda42c734b9c9a0844217c3b0a055bcc7ed929041ff7d54e8a082ffa43674d6b61ff3689e0b36a613948592dd1e31b22cd518", 0xa1}, {&(0x7f0000001540)="805d384ece11f9adccb7458d79ce154d85d14fee042bc2309a07edc5e65b8c9db1ab784fb42fbccfa4863fc638b4f4f3a3caea589d508347ec2cd10facf24893b09561d11acdc3670f09b1ac8fceeaa02f40cf853aedf03e5fffd98f066c184f0b3773f0e95b4d4ab0b8de063af8b3327674fd7f5e7d0a13841d512fcb0c7a3fba9e2ea60632677e14b5c44602736580c96a7c032d09539eed2aee76980c3c73365595b45eba8366b35f596363d76bd49a1021e9385419fc26d43656db58e637fd2ae30157de97ded0ea2902658015126a3ae65cbabd", 0xd6}], 0x31c, 0x0, 0x0, 0x4000010}, {&(0x7f0000001680)={0x27, 0x1, 0x0, 0x7, 0x5d, 0x2, "312465baa39df5df8dafedef2976adc961ca8e8f217efa47fd75821e2f47d72e390c62fa64433b030aeef9439f78d3eadeaf16e2bb31dac2c9cc9e5708d53e", 0x3}, 0x60, &(0x7f0000001740)=[{&(0x7f0000001700)="4ef8013bc0207f8cbf32910efc67f89e0244c247103171769a48e87782f25f", 0x1f}], 0x1, 0x0, 0x0, 0x4008098}], 0x7, 0x4000000)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  413.670132] protocol 88fb is buggy, dev hsr_slave_0
[  413.675300] protocol 88fb is buggy, dev hsr_slave_1
23:57:32 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  413.750205] protocol 88fb is buggy, dev hsr_slave_0
[  413.755853] protocol 88fb is buggy, dev hsr_slave_1
23:57:32 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0xfeffffffffff7fff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:32 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r2, &(0x7f0000000100), 0xe)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r2}, {r3, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:32 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)

23:57:32 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:32 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
lseek(r1, 0x4, 0x2)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r2, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:32 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:32 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, {0x0, 0x5, 0x8, 0x80, 0x4, 0xfd}}, 0x5)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r2, 0x0, 0x5, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:32 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x0, 0xa000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10)

23:57:32 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:32 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000400)={{0x9, 0x5, 0x350824d0, 0x6, 'syz0\x00'}, 0x0, 0x30000400, 0x6, r5, 0x4, 0x0, 'syz1\x00', &(0x7f00000003c0)=['TIPCv2\x00', 'nodevem0vmnet0\x00', '\x00', '\x00'], 0x18, [], [0x8, 0x500e, 0x4, 0xfbff]})
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000380)=0x8000, 0x4)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xfffb, {0x20, 0x0, 0x0, 0x8, 0x4, 0x6}, 0x0, 0x3}, 0xe)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r6, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:32 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000280)=0x9)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:32 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0xa}, 0x6}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xb3b, @loopback, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @rand_addr=0x2ed}, 0xfffffffc}, @in6={0xa, 0x4e22, 0x0, @rand_addr="09bd03b1057307244ce69072ed4fb1c8", 0x704}], 0xc0)

23:57:32 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="e7b9553a35ac5009a7c4d5f61e461ff81a992275a7b4167ba708d6e9d7d346023ffd999e9f0590f3e97126b1fa0665f60e7d734dd62e91a0b077100dd974881062f53b0618ed9a3f8c3f298665792238982adf256e9304d0c1ee4dcf", 0x5c}, {&(0x7f0000000280)="79de51905e655b0207039b93c6520d67a3027c03eda05edc", 0x18}], 0x2, &(0x7f0000000400)=[{0x78, 0x235, 0x2, "fe4b7215b2d36982c1cd806efea1be840874c7646045100b128a564415459594e5e96c5e25fa18649ae49ce7f9995d1cb680eab969c82c53b2b298eeb5d530b6292a3170f724b586c69fa4ee7cb75a117b49e20925b4deb00e6711862557a0187b033352"}, {0x100, 0x104, 0x8, "76182452a087235732d29c0406c8eb24294e4fd68d6402ccc7704b50ae7fb3958612d1bff07eca754b6e715f10b4d441e8f2f20fb2b412d673f6f167a764fc8cd637ec38040f59f849d0c89ea8c01ab944f15962e889273125830ff38646c1990ec08c7e8db179b3644784a4ef21666e9d5959878e2d96d5e52e40711560068520d0b7a141454e1843d3c0e97ce00640237759a388155f6d545486d9489b3cd2b73cc88b2dd656ea35baa0b7afebb376b51a75827bfc738d5335e91438657ba395c85641cd0f4ef586ddf998ab7b69da47f8459171c1bf226beacfd091001ae2877b5006676fc4fb9152c4cc19a2e67c"}, {0xa0, 0x106, 0x1, "6ae3d4706bd53fe6edf1292f0fbf753b7a2348efa4272d2c85bf8ec95f52257fb883e87dc89f741e0a7f31ca3e4eec1315d5621a41302d95dc0781a2722616875273dbbfd23d08c10b66003dd855446920cd5cabf74c41936c40b29f0afd4bf9cac17e1ae878a8078241cb48f9b6a79dc168a1e4a96451d3b3b8b0fee524aa7f1450dfc30a538ef423a453587c169f"}], 0x218}}], 0x1, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:32 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
epoll_create1(0x140000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000800)={0x1, @sliced={0x3, [0x20, 0x6ed5, 0x9, 0x100, 0x1ff, 0x1, 0xcdd4, 0x4, 0x508, 0x8, 0x401, 0x8001, 0x3, 0x0, 0x7, 0x45, 0x2, 0x7ff, 0xfffb, 0x3, 0x3, 0x0, 0x7ff, 0x439c, 0x6f16, 0x0, 0xae5, 0x101, 0x2, 0x0, 0x8cd, 0x52b4, 0x0, 0x4, 0x3, 0x1ff, 0x1, 0x0, 0x8001, 0x7f, 0xfffc, 0x40, 0xc5c0, 0x1, 0x7, 0x4, 0x3, 0x2], 0x2}})
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc)

23:57:32 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:32 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="e7b9553a35ac5009a7c4d5f61e461ff81a992275a7b4167ba708d6e9d7d346023ffd999e9f0590f3e97126b1fa0665f60e7d734dd62e91a0b077100dd974881062f53b0618ed9a3f8c3f298665792238982adf256e9304d0c1ee4dcf", 0x5c}, {&(0x7f0000000280)="79de51905e655b0207039b93c6520d67a3027c03eda05edc", 0x18}], 0x2, &(0x7f0000000400)=[{0x78, 0x235, 0x2, "fe4b7215b2d36982c1cd806efea1be840874c7646045100b128a564415459594e5e96c5e25fa18649ae49ce7f9995d1cb680eab969c82c53b2b298eeb5d530b6292a3170f724b586c69fa4ee7cb75a117b49e20925b4deb00e6711862557a0187b033352"}, {0x100, 0x104, 0x8, "76182452a087235732d29c0406c8eb24294e4fd68d6402ccc7704b50ae7fb3958612d1bff07eca754b6e715f10b4d441e8f2f20fb2b412d673f6f167a764fc8cd637ec38040f59f849d0c89ea8c01ab944f15962e889273125830ff38646c1990ec08c7e8db179b3644784a4ef21666e9d5959878e2d96d5e52e40711560068520d0b7a141454e1843d3c0e97ce00640237759a388155f6d545486d9489b3cd2b73cc88b2dd656ea35baa0b7afebb376b51a75827bfc738d5335e91438657ba395c85641cd0f4ef586ddf998ab7b69da47f8459171c1bf226beacfd091001ae2877b5006676fc4fb9152c4cc19a2e67c"}, {0xa0, 0x106, 0x1, "6ae3d4706bd53fe6edf1292f0fbf753b7a2348efa4272d2c85bf8ec95f52257fb883e87dc89f741e0a7f31ca3e4eec1315d5621a41302d95dc0781a2722616875273dbbfd23d08c10b66003dd855446920cd5cabf74c41936c40b29f0afd4bf9cac17e1ae878a8078241cb48f9b6a79dc168a1e4a96451d3b3b8b0fee524aa7f1450dfc30a538ef423a453587c169f"}], 0x218}}], 0x1, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:32 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x86a20, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8200200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0xfffffffffffffe6c}, 0x1, 0x0, 0x0, 0x2402c001}, 0x400)
r6 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:32 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="e7b9553a35ac5009a7c4d5f61e461ff81a992275a7b4167ba708d6e9d7d346023ffd999e9f0590f3e97126b1fa0665f60e7d734dd62e91a0b077100dd974881062f53b0618ed9a3f8c3f298665792238982adf256e9304d0c1ee4dcf", 0x5c}, {&(0x7f0000000280)="79de51905e655b0207039b93c6520d67a3027c03eda05edc", 0x18}], 0x2, &(0x7f0000000400)=[{0x78, 0x235, 0x2, "fe4b7215b2d36982c1cd806efea1be840874c7646045100b128a564415459594e5e96c5e25fa18649ae49ce7f9995d1cb680eab969c82c53b2b298eeb5d530b6292a3170f724b586c69fa4ee7cb75a117b49e20925b4deb00e6711862557a0187b033352"}, {0x100, 0x104, 0x8, "76182452a087235732d29c0406c8eb24294e4fd68d6402ccc7704b50ae7fb3958612d1bff07eca754b6e715f10b4d441e8f2f20fb2b412d673f6f167a764fc8cd637ec38040f59f849d0c89ea8c01ab944f15962e889273125830ff38646c1990ec08c7e8db179b3644784a4ef21666e9d5959878e2d96d5e52e40711560068520d0b7a141454e1843d3c0e97ce00640237759a388155f6d545486d9489b3cd2b73cc88b2dd656ea35baa0b7afebb376b51a75827bfc738d5335e91438657ba395c85641cd0f4ef586ddf998ab7b69da47f8459171c1bf226beacfd091001ae2877b5006676fc4fb9152c4cc19a2e67c"}, {0xa0, 0x106, 0x1, "6ae3d4706bd53fe6edf1292f0fbf753b7a2348efa4272d2c85bf8ec95f52257fb883e87dc89f741e0a7f31ca3e4eec1315d5621a41302d95dc0781a2722616875273dbbfd23d08c10b66003dd855446920cd5cabf74c41936c40b29f0afd4bf9cac17e1ae878a8078241cb48f9b6a79dc168a1e4a96451d3b3b8b0fee524aa7f1450dfc30a538ef423a453587c169f"}], 0x218}}], 0x1, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:32 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
dup(r0)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:32 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="e7b9553a35ac5009a7c4d5f61e461ff81a992275a7b4167ba708d6e9d7d346023ffd999e9f0590f3e97126b1fa0665f60e7d734dd62e91a0b077100dd974881062f53b0618ed9a3f8c3f298665792238982adf256e9304d0c1ee4dcf", 0x5c}, {&(0x7f0000000280)="79de51905e655b0207039b93c6520d67a3027c03eda05edc", 0x18}], 0x2, &(0x7f0000000400)=[{0x78, 0x235, 0x2, "fe4b7215b2d36982c1cd806efea1be840874c7646045100b128a564415459594e5e96c5e25fa18649ae49ce7f9995d1cb680eab969c82c53b2b298eeb5d530b6292a3170f724b586c69fa4ee7cb75a117b49e20925b4deb00e6711862557a0187b033352"}, {0x100, 0x104, 0x8, "76182452a087235732d29c0406c8eb24294e4fd68d6402ccc7704b50ae7fb3958612d1bff07eca754b6e715f10b4d441e8f2f20fb2b412d673f6f167a764fc8cd637ec38040f59f849d0c89ea8c01ab944f15962e889273125830ff38646c1990ec08c7e8db179b3644784a4ef21666e9d5959878e2d96d5e52e40711560068520d0b7a141454e1843d3c0e97ce00640237759a388155f6d545486d9489b3cd2b73cc88b2dd656ea35baa0b7afebb376b51a75827bfc738d5335e91438657ba395c85641cd0f4ef586ddf998ab7b69da47f8459171c1bf226beacfd091001ae2877b5006676fc4fb9152c4cc19a2e67c"}, {0xa0, 0x106, 0x1, "6ae3d4706bd53fe6edf1292f0fbf753b7a2348efa4272d2c85bf8ec95f52257fb883e87dc89f741e0a7f31ca3e4eec1315d5621a41302d95dc0781a2722616875273dbbfd23d08c10b66003dd855446920cd5cabf74c41936c40b29f0afd4bf9cac17e1ae878a8078241cb48f9b6a79dc168a1e4a96451d3b3b8b0fee524aa7f1450dfc30a538ef423a453587c169f"}], 0x218}}], 0x1, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x402201)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40800000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x6040042}, 0x34040)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r3, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:33 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x181000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:33 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000340)={0x0, @reserved})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x0)
r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
shmdt(r1)
r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0x7, "ee15ac175a7807"}, 0x9, 0x1)
shmdt(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x3eb7a0ef48baeaaf, 0x0)

23:57:33 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="e7b9553a35ac5009a7c4d5f61e461ff81a992275a7b4167ba708d6e9d7d346023ffd999e9f0590f3e97126b1fa0665f60e7d734dd62e91a0b077100dd974881062f53b0618ed9a3f8c3f298665792238982adf256e9304d0c1ee4dcf", 0x5c}, {&(0x7f0000000280)="79de51905e655b0207039b93c6520d67a3027c03eda05edc", 0x18}], 0x2, &(0x7f0000000400)=[{0x78, 0x235, 0x2, "fe4b7215b2d36982c1cd806efea1be840874c7646045100b128a564415459594e5e96c5e25fa18649ae49ce7f9995d1cb680eab969c82c53b2b298eeb5d530b6292a3170f724b586c69fa4ee7cb75a117b49e20925b4deb00e6711862557a0187b033352"}, {0x100, 0x104, 0x8, "76182452a087235732d29c0406c8eb24294e4fd68d6402ccc7704b50ae7fb3958612d1bff07eca754b6e715f10b4d441e8f2f20fb2b412d673f6f167a764fc8cd637ec38040f59f849d0c89ea8c01ab944f15962e889273125830ff38646c1990ec08c7e8db179b3644784a4ef21666e9d5959878e2d96d5e52e40711560068520d0b7a141454e1843d3c0e97ce00640237759a388155f6d545486d9489b3cd2b73cc88b2dd656ea35baa0b7afebb376b51a75827bfc738d5335e91438657ba395c85641cd0f4ef586ddf998ab7b69da47f8459171c1bf226beacfd091001ae2877b5006676fc4fb9152c4cc19a2e67c"}, {0xa0, 0x106, 0x1, "6ae3d4706bd53fe6edf1292f0fbf753b7a2348efa4272d2c85bf8ec95f52257fb883e87dc89f741e0a7f31ca3e4eec1315d5621a41302d95dc0781a2722616875273dbbfd23d08c10b66003dd855446920cd5cabf74c41936c40b29f0afd4bf9cac17e1ae878a8078241cb48f9b6a79dc168a1e4a96451d3b3b8b0fee524aa7f1450dfc30a538ef423a453587c169f"}], 0x218}}], 0x1, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002580)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000002680)=0xe8)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000026c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x30}}, r3}, 0x14)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:33 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:33 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x2000000000003, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x86a20, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8200200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0xfffffffffffffe6c}, 0x1, 0x0, 0x0, 0x2402c001}, 0x400)
r6 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8, {0x2, 0x0, 0x4, 0x3, 0x9, 0x9}, 0x8, 0xff}, 0xe)
ppoll(&(0x7f0000000040)=[{r2}, {r1}], 0x39f, 0x0, 0x0, 0x0)

23:57:33 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000140)="8bd08685dfc768e5cf39f96ac6a8dbc48ffa3fdf6761fdf84bd1cffa03366777f35474e6936d6f40fc554217bdc0b477004630c97027aa11ba160d65829eb9fb3360d7cde6a03a4a75c746a8dbf8397e734b429d950a1d900d6388ca19486b9a3ca1099aa8dfeba8bcd6b0a360bb3a01ce0a1e5d9e49083e500aa91e45de281cbd9e9f9a9790c20defedf2134fc7eeea218c9f306a2e0ff7ea51d60a4052e245df5eb43e8b1813612713f47c7d9adcbbd3bfd0c170dd797a49390846e49558b1eb99e4bc128816f193ebafda4d237dcc132685d0c2201bb28f143f3fecc5e52400ec89c2d6bdff124740294c7c76f9e8294c35", 0xf3)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)

23:57:33 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6480856ec27edbea}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = msgget(0x2, 0x20)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000800)=""/215)
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000640)=""/4097, 0x1001}, {&(0x7f00000001c0)=""/254, 0x226}], 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x2, 0x0, [{0x8, 0x0, 0x0, 0x0, @sint={0x1, 0xffffffff}}, {0x7d2, 0x3, 0x0, 0x0, @adapter={0x0, 0x3ff, 0x7ff, 0xfffffffd}}]})

23:57:33 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0, 0x80}, {r1, 0xd0e1d3c02d116ca7}], 0x1ffffffffffffda4, 0x0, 0x0, 0x0)

23:57:33 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x86a20, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8200200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0xfffffffffffffe6c}, 0x1, 0x0, 0x0, 0x2402c001}, 0x400)
r6 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
r7 = dup3(r6, r2, 0x4247ff1f0f80a1c5)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={<r8=>0x0, 0x7fffffff, 0x3, 0xffff, 0x401, 0x8, 0x8000, 0xfffffff9, {0x0, @in6={{0xa, 0x4e20, 0xfffffffc, @loopback}}, 0x1, 0xff, 0x3, 0x3f, 0xffffffff}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={r8, 0x3}, &(0x7f00000002c0)=0x8)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:33 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x20000000000012, r4, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:33 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:34 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 0:
getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000087074816aba01f554bdd8dc25cc2f439e1ec9c747de2be8d5161501f016accb36df78cdf8ec5afc4095659c24428b71f0205b31f690d65de6c980c883a31f5f9019fd3a661a9c325b32cc6f2", @ANYRES16=r1, @ANYBLOB="200026bd7000fedbdf25070000000500060009000000"], 0x1c}}, 0x800)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'tunl0\x00', {0x20000}, 0xfff8})
connect$bt_l2cap(r2, &(0x7f0000000100), 0xe)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x410141, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000007c0)={0xfffffffb, 0x6, 0x3, 0x710b, [], [], [], 0xe09c, 0x0, 0x81, 0x6001, "f5704d007ab02fc4812ff0ff1d24f4a9"})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={r5, 0x8001, 0x9}, &(0x7f0000000540)=0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r7=>0x0, &(0x7f00000003c0)=0x4)
ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000900)="1154280ce1f3ba15d04e77e00024764bdeb8083f1bca51f63560549917f74f782205e1601d108f336b3806e3ae5da219abc5328993ac20fd7a91c65d824d98fa00021681974439b04ec7a3bccfdb27a64ef3728936ca957c58eb6a8c98c0f9ebe9e49d7397af421f75f69e159c9dd7826e5a73e17eab294afb621a3ddfdaa78c8484fd9e80a201e42bed8cb6dfd13ccfb347ffbf7888d1a7417e6b3a0c57d3e19f1c3eca93970d2ee1dd76b29a9e1fde2b1225ede22f6a")
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdb00000300000000000000", @ANYRES32=r7, @ANYBLOB="0c830296d6b4e872ddb7f0d51a82b6c577"], 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x8000, 0x0)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0406618, &(0x7f0000000580)={{0x2, 0x0, @identifier="e6912df3e1bb92c7910c7d82767a3286"}})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, 0x0, 0x0)
r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0)
ppoll(&(0x7f00000000c0)=[{r8, 0x8}, {r10, 0x1000}, {r3, 0x4088}, {r11, 0x40}], 0x2000000000000641, 0x0, 0x0, 0xfffffffffffffde4)
r12 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r12)
r13 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r13, &(0x7f00000017c0), 0x199, 0x0)
recvfrom$inet(r13, &(0x7f00000009c0)=""/249, 0xf9, 0x100, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10)

23:57:34 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
fsetxattr$security_selinux(r2, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:groupadd_exec_t:s0\x00', 0x25, 0x1)
r5 = dup2(r3, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4)

23:57:34 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
readv(r0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4084, 0x1001}, {&(0x7f0000000000)=""/61, 0xb8}, {&(0x7f00000000c0)=""/51, 0x41}], 0x1000000000000033)

23:57:34 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
r7 = dup3(r6, r2, 0x4247ff1f0f80a1c5)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={<r8=>0x0, 0x7fffffff, 0x3, 0xffff, 0x401, 0x8, 0x8000, 0xfffffff9, {0x0, @in6={{0xa, 0x4e20, 0xfffffffc, @loopback}}, 0x1, 0xff, 0x3, 0x3f, 0xffffffff}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={r8, 0x3}, &(0x7f00000002c0)=0x8)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = shmget(0x0, 0x2000, 0x800, &(0x7f000000d000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x12101)
accept4$bt_l2cap(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/184, 0xb8}], 0x1, 0x3)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1400)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="010800008bfe47accd08a8d4abc7840a1edb95ab7c538497db5f441231b7386eb37b66c2bb909035d606725ccea1dd0f6b5d4737831dd8b7cbb9ccd43dfe0351bd28b7d4c3268c5b3f490774b80e01ce337e8d5c5ad14884d767fa3e1cbb6db028393bfdcf457c9f38b5ece9de119d7894ea124e4be6e36cf47d638be081568ac1743cb02ea598", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=<r6=>r5, &(0x7f00000001c0)=0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="12080000008b16474283c9c9b5d2873225d57e93f1ca7740a4a67ab3db59added0513d8fc8a9bc749219"], &(0x7f0000000240)=0x1a)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000080)=0x5)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8060, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000100)={0x1ff, 0x3f, 0xa356, 0x40}, 0x10)
r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x10100, 0x0)
connect$bt_sco(r8, &(0x7f00000002c0)={0x1f, {0x0, 0xcd, 0x7, 0xf, 0x7, 0xff}}, 0x8)

23:57:34 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
r3 = dup(r2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)

23:57:34 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/184, 0xb8}], 0x1, 0x3)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1400)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="010800008bfe47accd08a8d4abc7840a1edb95ab7c538497db5f441231b7386eb37b66c2bb909035d606725ccea1dd0f6b5d4737831dd8b7cbb9ccd43dfe0351bd28b7d4c3268c5b3f490774b80e01ce337e8d5c5ad14884d767fa3e1cbb6db028393bfdcf457c9f38b5ece9de119d7894ea124e4be6e36cf47d638be081568ac1743cb02ea598", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=<r6=>r5, &(0x7f00000001c0)=0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="12080000008b16474283c9c9b5d2873225d57e93f1ca7740a4a67ab3db59added0513d8fc8a9bc749219"], &(0x7f0000000240)=0x1a)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000080)=0x5)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8060, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000100)={0x1ff, 0x3f, 0xa356, 0x40}, 0x10)
r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x10100, 0x0)
connect$bt_sco(r8, &(0x7f00000002c0)={0x1f, {0x0, 0xcd, 0x7, 0xf, 0x7, 0xff}}, 0x8)

23:57:34 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x3, {0x0, 0x0, 0x0, 0x1c}}, 0xe)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xd0e1d3c02d116ca7}], 0x2, 0x0, 0x0, 0x0)
socket(0x21, 0x0, 0xcc)

23:57:34 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
fcntl$notify(r1, 0x402, 0x2)
epoll_create(0xbdcd8d2)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r3 = socket$inet(0x2, 0x0, 0x8)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0)
sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x7f)
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @broadcast}, {0x7}, 0x0, {0x2, 0x4e21, @multicast2}, 'netdevsim0\x00'})

23:57:34 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'ip_vti0\x00', {0x3}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0xfffffff, 0x8, 0x1000, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x9909dc, 0x5, [], @p_u32=&(0x7f00000001c0)=0x2}})
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf250400000008000400ac14ff030000000000000000000000000000000000000101"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0xa820a0)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
r7 = dup3(r6, r2, 0x4247ff1f0f80a1c5)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={<r8=>0x0, 0x7fffffff, 0x3, 0xffff, 0x401, 0x8, 0x8000, 0xfffffff9, {0x0, @in6={{0xa, 0x4e20, 0xfffffffc, @loopback}}, 0x1, 0xff, 0x3, 0x3f, 0xffffffff}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={r8, 0x3}, &(0x7f00000002c0)=0x8)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 5:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
preadv(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/184, 0xb8}], 0x1, 0x3)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1400)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="010800008bfe47accd08a8d4abc7840a1edb95ab7c538497db5f441231b7386eb37b66c2bb909035d606725ccea1dd0f6b5d4737831dd8b7cbb9ccd43dfe0351bd28b7d4c3268c5b3f490774b80e01ce337e8d5c5ad14884d767fa3e1cbb6db028393bfdcf457c9f38b5ece9de119d7894ea124e4be6e36cf47d638be081568ac1743cb02ea598", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=<r6=>r5, &(0x7f00000001c0)=0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYBLOB="12080000008b16474283c9c9b5d2873225d57e93f1ca7740a4a67ab3db59added0513d8fc8a9bc749219"], &(0x7f0000000240)=0x1a)
ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000080)=0x5)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8060, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000100)={0x1ff, 0x3f, 0xa356, 0x40}, 0x10)
r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x10100, 0x0)
connect$bt_sco(r8, &(0x7f00000002c0)={0x1f, {0x0, 0xcd, 0x7, 0xf, 0x7, 0xff}}, 0x8)

23:57:34 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000100), 0xe)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ppoll(&(0x7f0000000000), 0x22c, 0x0, 0x0, 0xffffffffffffff3d)

23:57:34 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x103000021)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x0, 0x4)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0x1309})

23:57:34 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x63, &(0x7f0000000280)=0x1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
r7 = dup3(r6, r2, 0x4247ff1f0f80a1c5)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={<r8=>0x0, 0x7fffffff, 0x3, 0xffff, 0x401, 0x8, 0x8000, 0xfffffff9, {0x0, @in6={{0xa, 0x4e20, 0xfffffffc, @loopback}}, 0x1, 0xff, 0x3, 0x3f, 0xffffffff}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={r8, 0x3}, &(0x7f00000002c0)=0x8)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0))

23:57:34 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x63, &(0x7f0000000280)=0x1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:34 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:34 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x20, 0x36, 0x13a584bd384566a4, 0x70bd26, 0x25dfdbff, "", [@typed={0xe, 0x1a, 0x0, 0x0, @str='numa_maps\x00'}]}, 0x20}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}], 0x20, 0xf853a4f57515d258}, 0x955)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:35 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
shmat(r0, &(0x7f000000d000/0x1000)=nil, 0x2000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'lo\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000001c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x63, &(0x7f0000000280)=0x1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4083, 0x1001}], 0x100000000000013f)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10000)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={<r2=>0x0, 0x40000}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x3, 0x1, 0x80000001}, &(0x7f0000000180)=0x10)

23:57:35 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x3, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:35 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:35 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x63, &(0x7f0000000280)=0x1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040), 0x0)

[  417.190129] net_ratelimit: 16 callbacks suppressed
[  417.190135] protocol 88fb is buggy, dev hsr_slave_0
[  417.200375] protocol 88fb is buggy, dev hsr_slave_1
23:57:35 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:35 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0x63, &(0x7f0000000280)=0x1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 3:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000000c0)={{0x0, @name="17ef1841ff01e49e95acefa5ccd85c12d9b107f11c6d6539e261538a5c94e9db"}, 0x8})
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:35 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:35 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:35 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:35 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4090, 0x1001}], 0x10000000000001b5)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20001, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000000000)=0x6)
setuid(r5)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x200000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'net/fib_trie\x00'}}, {@nodevmap='nodevmap'}, {@mmap='mmap'}, {@fscache='fscache'}, {@noextend='noextend'}, {@cachetag={'cachetag', 0x3d, 'net/fib_trie\x00'}}, {@access_any='access=any'}, {@nodevmap='nodevmap'}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@euid_lt={'euid<', r5}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise='appraise'}]}})

23:57:35 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:35 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:35 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

[  417.769278] protocol 88fb is buggy, dev hsr_slave_0
[  417.775432] protocol 88fb is buggy, dev hsr_slave_1
23:57:36 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600603e)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='numa_maps\x00')
ptrace$peekuser(0x3, r0, 0x2)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000001680)="2ceaba52541cb96d70dabe5a4c9595d62e181697ef7bcf0719e70693db1bda5ac5c8bf4592f0935ad9d98d69a41deec8915a898b29c21f7aaab10e91308e45a9125c9e1b7a1eb9b520286b26ed99b3478191ab418a0f3b842e99afb4bdf7adf4a6f8bc757a706e89cbd2f40e880a7f3e615e53f074f1be9d74376aa09e5f5cde67af95fd1c5b33672e6ec5542e75a02286e55efbbefe765f543ac26413dbc12504152dd2c6b7a39a45faf9c6aba9f96174fbf5dabdc3656ffbedb3e137b6af9434b785152089eb57c7b37ee3828eba5045c28d46b12dfd4dbb69b092fb944185c75af610570e60982af840dbebff1e66f36b62f01d4c00cab94c4771e73f29b70cd3af498f2f16b217955bcd85d9409cd6b8801aa7a86799ab000e0964c2fab760babd6b300d4c651742ab3c9ffa428f4d3c2340f08b11a4c22795e7fea334e0ccec6eb26cfd59d9d8427063b4f5b440c0be037c0787acaa82c9c94ae4601035e50729cd601a08796bf340617710666262be4b3753e028a8fadcd5e97d5dbf7cbda3279f4bd6d672b1d42f55fe677788b9ec3f345ba7ee3f1f8901b8ac1288257b6830715fa2112a64da92146b7719a95922cc7f63705677448c0c498442cb078874f4a0138efc3e2baf4f060e4776c4130d1647b90fb1b9cf31674c0e4250ad4150af46f71d8a02ce72922d85ca1ff1de3fb30b976ed71347830445000596907c8475af7b2b98882e79486a550d760a6ede80bd4fbbff51a3a92661b748e6a0e0b8a7f1ee5da862669e4b6ad1db236273f0175be398045b950aa188b965c41203417fc26380fe52e58d24a295bedc35c7a51dc800fdc855ded92f94c1b456e02b7a105899c0f41d85412415df79373e4dfc9e19493022216171871c7c516b2c2a2103dd27e63a0182884679076b2651d6462f51616b518024c06660e443108ae55808ba53145c0f678bb0ee525f590ab726a9ba809a2640c4148f500c196cc0a2169847f0d2fa2249399a955404812d66db656892d12b70759550ed666a25dd73a80b33a2ec76e028958696c2ae64d693a04c6d456e7dde3d90d7a60847ef24070b127ac23a081d0d4049afeff9660b8c715e3373e19b9475e25a7f2005a2abc1f3f4a1463b12c705228da8f072992b626dfe581eebab64cb163046ff1261ebbc69006e6a43312f54d5e68c88d7cbb87d66319d0f634bb79e2cff0ce2be75e90877eeadf816b0dfea3aa6b56d01512c98ab94b7000059a01d944a88d7da3098f80b67cf2695953a640dad2616bfe0b9684e62f469398bfc29176f441c3c4cf23d45f89c4fba442ac294231a559884d049e8d50f41ffbfdfd831d5944f63953f12e0f40ad58814923304750761737bce7fed4deb27187af5ff1f2218f213803ed18e7bb03f6844dd44a5eb4e54def3dec9b3dd66da912c966a294d32a84bd3e03fc411ab0f5699e1b9cfa5431d22f04946d48a75eb19b14ca91a8acef2ba00ef7f801172c16f1fc643c5e969c696c9b5b8d83baeb0f8f4e2f86d6e9beb401fdb7c11b4f676a9ed79d75e44b6111e043f2a707598dc415778b2581be6911e68483cf316adc9a8ec7930e697541a58c9e4c789343d68f7685389119c5efd54a131e4409c8315a963c03e69fe1b64fb3da4880f674b672bf12a450595678bdbd1e4fae810c574678b708a4dba0402f97114975b0ef899170f2303f228e4cfab79af4a5a416ecf361d4521fc46b50e86a1e33bb1fa3d3af8aa7603ba21f158cc9fa6ef82cb75d26219fc7d45992a841964578500dfdc1b91e8689daa06d0926568d937d16d307a37a094211a17a09202558a06e97f924636965df54920b15c8ae3925fdf1b7b47e53cfb8543afded274e867cbe4e9a443ece0955c94b34fd4eb743c5ec40bdd9a26d91c787e0330495017b27bc87ff964f3882b09af044dfe01420b4a3cea38d2e45e65b8fb080ae0f829f4b99b26898e643c615c8b66b859bc038ad7bc2b7b787bbe6e7616b98cd09680049ee298bb6ec00d2fd76eb0fd2dc5e6fa0d887ed18f995a46ff2b911d3e57934e4b2c851f29bf1e2a9d895a9cc378e27a8b8608060f49f7fa5daaa796e620d8125bdf12426f28d63ad96b851e8f3f1e9aeea28021d3cf320f83b1e038b1398607f4517734ae5d5f4314ed89b666d00ca29c7d9d2e975fbbabfcc0c55c691635b2c20ce0af303a1778c5f7af66032841676bfbf3541a5bc8ca626b508125d8586280adcb4393c1db3b1ba85ca2f153b3b9f54695290c88ca243b48e2082dc7ca3def3c2ae66fc7bc4346c5b1ac7b1c3056778d738f50fdd542faaef22270ef4b89dfd5b2d5528431077f43cafbc5e0e7a975cb0ee7f8ad2b802645f42c4e2272bc63126adb746d5eb7dbe4b1a5cdf072fc1653d80f645c39e58e1c25c11c3104116a83215b13e6110d9e1b12233ca79fd04161d94ec715394f1134dd74f58c5caa03bfc471fe789d800bfa09a5ea8751bc52f86327ebd3e915a3d886e919cce3a7aa55eee84cc5f9771419186c13821e80ef0416eb9c3acee991cef28bafd7e5a3feab763746a783bf9e25a59507e2c6800c037ab0e64d7f38750cacbdeda50b7c1965382e4cc5d1cc84835da94ec57e47e54c229da5adbe5980b4d2e0bb56ab38bad423b0baf5f067cf4118746d96a1010f5d6ca51e0f5bde5e5d6644aed1a7373ff61fbac5e75acb8b1b604fac5382ab69fb50f9bb8e80b74b2e219d70ad47b28e5e6f51d4d8438814d994c818c25fd1806ff005024d8ad636de15faf5e4a3edc4954d3d02ec874394926923c35f3d4f4e55bbf340714bca09a726f21b669b596c67eb67b2047796db77ec3731f81733672e3b3dedbce61397c586da3b6a8cf09febb3d1e8f903c08453d6b4ae00c6f12f28277d81a70bf9a3a63657c3a7d069ac752440abbb646b73eb6bb6039251702a07b186803da1e06945bb8bb5e0f521601e45ead9bd8858a4fa2a3cfc0b3ffa1f99860bfd7fd4557d64bb0ee3d4cc72995c81d0fb05f1d246096a39b1c7f948b65703ba1075a1ed28959d828ba248630def0c9ddf368820d50dc4696cef391232334a3a158eb1bc36dc9c852704b50258343ee4bb96c99b60a7d013f024673cf823877cd99efd7ed0f7e1c290e2004f0dab565fccbf91d09ce78b9117253b1a7a37249d3ad82f82f186b4da120ee91c25002b0d787179ca0dd3a2ebd3030f10257a4fe315dd859ddcd0a43b5aa3b57b46d10aafaa4c74c1f8486a54caae66a24377fa182e22de91dca915f2e6b312317451833a6493b5a915b6ca72fe637812cb85c3ec55e50a76a0515f6042603c5530ee78b0fe1ebeadda73eaa613079c4719c34631bdc2d22c302ae34409e0b2e9500e82d3d0f7f6e96e96d1cf900155bc77b0481d0bc9ee82a039951a10966bf7f32d8e496193353f12cd2aa5655123546688a0f2eb5e6efd2d82cbb10e776c52786a6197ffe75a35409386ea4aa54c9a4e7bd2e49279f04a5033888c6a9c5c21111bd34272ca06cdbfe96b4e5831e40fac7a51746f289df02e022c3962be5c7a109af2ea8595a3ba9e52d6602d94b9521776fae69bf829c5f92f7113991bb59e6f94cc23bc58659a777198bcfeb97536ea37d70cfc3422aaa00e435f396d9b2b3791b5fd05b665732346ccd851230360862f44c3acaf5dbe513ba9e5d99abce579b6ed76f0cc7ce6ee8c8890595a94a3836b2b666de5325572614d26119ff83b33cd952e2bc083568006df9245cfd1e212778b047bdbf19990a5ed9477616b02319cf0f4d86f35616d0cef99ac620695ffa5b30f8703749f85ce59df855a738373ac7279af73b713f858bfc7bd4e728cecff765f16d43cd89afba169bf1718e6f7d04ccde9834b3654ba6c395363e4137915d6e3b813b72e625c6bf6f1a095f2ffb81730abf74973fdf26c98299cd18fad5bd408793652d9973ad7fd65e3971286565ab57d6594896dca4262370058aec1f711a6c2bad636915933299ffe0982e24096a4cb8e04bf922b9f5a85748816625c2eefd5343957fad820dfe63b402861b13cbc35257a6b92f4277ce8e8abe160c99a0253766a58b692c8e3340ed5da758e1ad5b2e1a72a9edcb617d578413cb32de5c45109525fff95f9c5465700453396b1ef97308506505a18ecf8f0733788f58846dae3e6d5b2cd6c32f9e9b736837755b22d46b04f1270756ce722a28c46b9de303c829fe73ddc9dc8a87037c29a6ed347570dbdab6e6bcb326b15d48f963fed5797d805ec70ead47dcfbf5bd740075e3877ed53c9fb8c02d04815f5fb7a9fab038f1af576f6c8a47a1095ee4af90ff2d4efd46c926d1d2522a3b27ee68d583aed2e6db0e4bdf557acfe94226aca95398370c887961ffca88b5b830db5fc33b506cc697e33c1be650219e2ef98b15547b38579efd7a9d0394e74a08d589e5b98d8b55feb749a0307c1989e871b762ced575ab910e2c94f4fc69ca945c0114d9a170ad58c4739e23cef8570a379cd682bea7ab67d76a6cc6e4be949b88774785a5e9ff4eed642f93ff187b5d5eded756b791356c9d4623b5ec58d8d8c3ba1afdec297609c23b05f97860cdf5ed559dce809f1bfd820ee1d6fe29779524a3926734e2348a64d505c004393d617062b8634c5c7cc3973f8608381dfd6545a7df417e63beb8cd897546c872bbb9868a8ed195b77462deeceb59061c88221db4a706e09a82cac068e0f86e53abb9875b6d92624707aa4049f292eaa0fe2a79b7fa079f19728f7e9f38bf39a2cf0760d6e146360fd15dd7c252e578e9eeb719df3855dc0ead752861281ce9e310bb213aef910163e4ae9583edc653ec2f04c481288d3af1130efa13cfd79eec5a52c2701a8f166a50f951f73d83cc2640d8706d6fb58011eb40e774ec6ac558629711939b1359084195f81ca697628da339735b68877bfef7dae80662a1e92d4636802c9bc8591a43e8b3a0067776cff4e1b11033fa03913431fd8b5e7e2b53a98be86e0eb160a7ea84ff7a76848f933060d9ffbb3cd0ea8ada1ec4065927c6a970cd8d2d2a6452cec3a9e490dc153a9cd47df22861e55dd162e6aca6b7d38d10044bc491db7c51666d71b725941f1fa0e4a2eb5a331bdfc756715ee74a6fe696bbae8a3ded9f0deeaf1f276f55c3baf22ecf0ac1917f27af38cd344c9a867238d356bace6594d945669c0a437a47151aff1406ce9e63e84ee2ea64d958963d2e45a17de4c0c437899c70f9ee489d472d35b285ab7aebed0244257ded8db56a453a6385c1dafdd7a0e8cb847871520f513811074d18aebef6f8efa84d22b0ec6614e0e62a3dfd278ff6078cfb5f1bb3c1a23794f64d38f673086c41c3c57fddda3c8e87a2e291af090b9c6a52432cbfef22033fe3b49b5fe6d7f92f0e759d0ae08f3fb14672de064728104289f2b200af7d2ae88b0953ea5c80febfee094cd3307a2a1bb0a8f0f15b6371c88394e15b2244a7ee2bc6bda0ebdb32877739dd4c8111576b5e969f88a36e85f7572f586d4bec537dcbac414db6bc38947e37d87f7478b94dec6758e39a7e15a89d52b71e945687fdb1bf00279415df7cf2b1dde2ce925a819930d57b829f3cecf7c4098467a80dab8573da36b6f83ba9a917fb5c5e8e0c93dbe18acd4aea068853566794116f09abeb9de9ab4cd949e3a1526462ca827300a85e8c835d8c7ccd6e910edff13a960963553f10268a09c7548a4b6616841252241cb799ffc50fa9d59febb0a64aa9ee4d33048cffe07088d5179b9f5700c59e434cbcdcf5eee4afb660f3303453eaa", 0x1000}, {&(0x7f0000000100)="1c5e13f2e82e4632ff8372f99c6b0d423a7d30021052754c931c4e19a5e05b43a253358fed04", 0x26}], 0x2, 0x0, 0x0, 0x40000}, 0x40)

23:57:36 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
getpeername$netrom(r2, &(0x7f0000000280)={{0x3, @null}, [@bcast, @rose, @rose, @bcast, @bcast, @netrom, @netrom, @rose]}, &(0x7f00000001c0)=0x48)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  417.830130] protocol 88fb is buggy, dev hsr_slave_0
[  417.835247] protocol 88fb is buggy, dev hsr_slave_1
23:57:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  417.910763] protocol 88fb is buggy, dev hsr_slave_0
[  417.917842] protocol 88fb is buggy, dev hsr_slave_1
[  417.990113] protocol 88fb is buggy, dev hsr_slave_0
[  417.995514] protocol 88fb is buggy, dev hsr_slave_1
23:57:36 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
r2 = dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080))

23:57:36 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r8, 0xffffffffffffffff)

23:57:36 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0)

23:57:36 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600b03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:36 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000001c0)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000000c0), 0x0, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x800})
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:36 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r8, 0xffffffffffffffff)

23:57:36 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0xd8fbe08318bfe244, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ff7000/0x9000)=nil, 0xd48a5a656600d03e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4097, 0x1001}], 0x1)

23:57:36 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:36 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f000000d000/0x3000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f000000e000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket(0xa, 0x5, 0xfa)
connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, {0x77, 0x8, 0x0, 0x0, 0x4, 0xfd}}, 0xfffffffffffffd53)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x510100, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80108}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x301, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:36 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = shmget(0x0, 0x2000, 0x800, &(0x7f000000d000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x12101)
accept4$bt_l2cap(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:37 executing program 5 (fault-call:10 fault-nth:0):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:37 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r8, 0xffffffffffffffff)

23:57:37 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = msgget$private(0x0, 0xf913b78d37381010)
msgrcv(r1, &(0x7f00000001c0)={0x0, ""/22}, 0x1e, 0x2, 0x2000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:37 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000100)=0x68)

23:57:37 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = shmget(0x0, 0x2000, 0x800, &(0x7f000000d000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x12101)
accept4$bt_l2cap(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:37 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)={0x0, 0x4, [@broadcast, @remote, @dev={[], 0x34}, @broadcast]})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}, 0x0, 0x1}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x30c01, 0x0)
ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x15fd)
r6 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:37 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
fcntl$getown(r3, 0x9)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0xa00)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100))
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:37 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

23:57:37 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = shmget(0x0, 0x2000, 0x800, &(0x7f000000d000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x12101)
accept4$bt_l2cap(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:37 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:37 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

23:57:38 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x5000)
getsockname$ax25(r4, &(0x7f0000000280)={{0x3, @netrom}, [@null, @remote, @rose, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f00000001c0)=0x48)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r6)
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000340)={0xffffff01, 0x4, 0xffffffff})
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
unshare(0xe882df8c61f2b8a9)

23:57:38 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

23:57:38 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

23:57:38 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:38 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000b000/0x4000)=nil, 0x3000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x81000)
recvfrom(r1, &(0x7f0000000340)=""/84, 0x54, 0x2, &(0x7f0000000800)=@l2tp={0x2, 0x0, @rand_addr=0xfa7, 0x1}, 0x80)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x20600, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f00000001c0)=0x1)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:38 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x5000)
getsockname$ax25(r4, &(0x7f0000000280)={{0x3, @netrom}, [@null, @remote, @rose, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f00000001c0)=0x48)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r6)
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000340)={0xffffff01, 0x4, 0xffffffff})
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
unshare(0xe882df8c61f2b8a9)

23:57:38 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:38 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x404a0ca3}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x6c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x210fd6a25277e0ca}, 0x24004050)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:38 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x5000)
getsockname$ax25(r4, &(0x7f0000000280)={{0x3, @netrom}, [@null, @remote, @rose, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f00000001c0)=0x48)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r6)
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000340)={0xffffff01, 0x4, 0xffffffff})
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
unshare(0xe882df8c61f2b8a9)

23:57:38 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:38 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:38 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x5000)
getsockname$ax25(r4, &(0x7f0000000280)={{0x3, @netrom}, [@null, @remote, @rose, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f00000001c0)=0x48)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r6)
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000340)={0xffffff01, 0x4, 0xffffffff})
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
unshare(0xe882df8c61f2b8a9)

23:57:38 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x208}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:38 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:38 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:39 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:39 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:39 executing program 3 (fault-call:11 fault-nth:0):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:39 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r6}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r5, 0x0, 0x5, &(0x7f0000000040)='ppp0\x00', r6}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001840)={<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001800)='net/fib_trie\x00', r6}, 0x30)
r8 = syz_open_procfs(r7, &(0x7f0000001ac0)='net/dev_snmp6\x00')
lsetxattr$trusted_overlay_opaque(&(0x7f0000001880)='./file0\x00', &(0x7f0000001b00)='trusted.overlay.opaque\x00', &(0x7f0000001b40)='y\x00', 0x2, 0x1)
preadv(r8, &(0x7f0000001980)=[{&(0x7f0000000100)=""/55}, {&(0x7f0000000800)=""/4096}, {&(0x7f00000001c0)=""/9}, {&(0x7f0000001a00)=""/191}, {&(0x7f00000018c0)=""/141}, {&(0x7f0000000280)=""/122}], 0x100002d6, 0xfffffffffffffffc)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x1000, 0x1, 0x1, 0x2, 0x6, 0x3, 0xffff0000, 0x8, 0x5, 0x4, 0x2, 0xca, 0x0, 0x8, 0x20, 0x2, {0x9, 0x3}, 0xfe, 0xba}})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:39 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:39 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
get_thread_area(&(0x7f0000000180)={0x2cc7, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:39 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:39 executing program 0 (fault-call:11 fault-nth:0):
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00'})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:39 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:39 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0xfe, 0x4, 0xdd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000280)={0x2, 0x9, "960525f76fda6d136a2a44835e08c9cb339c0d6799f1ec1b64b7110d104e2d30", 0x9, 0x6, 0x1, 0x1800, 0x9a90ddfbde2ade06})
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000100)=0x3, 0x8)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000001c0), 0x4)

23:57:39 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {0x10}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = getpgrp(0x0)
write$cgroup_pid(r2, &(0x7f00000001c0)=r4, 0x12)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
munlock(&(0x7f000000a000/0x1000)=nil, 0x1000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')

[  421.291266] FAULT_INJECTION: forcing a failure.
[  421.291266] name failslab, interval 1, probability 0, space 0, times 0
[  421.330794] CPU: 1 PID: 26108 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  421.338730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  421.348095] Call Trace:
[  421.350699]  dump_stack+0x142/0x197
[  421.354352]  should_fail.cold+0x10f/0x159
[  421.358527]  should_failslab+0xdb/0x130
[  421.362524]  kmem_cache_alloc+0x2d7/0x780
[  421.366700]  ? rfcomm_dlc_open+0x83/0xc60
[  421.370860]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[  421.375813]  ? sock_destroy_inode+0x60/0x60
[  421.380144]  sock_alloc_inode+0x1d/0x260
[  421.384216]  alloc_inode+0x64/0x180
[  421.387863]  new_inode_pseudo+0x19/0xf0
[  421.392396]  sock_alloc+0x41/0x280
[  421.395940]  __sock_create+0x8f/0x620
[  421.399753]  sock_create_kern+0x3b/0x50
[  421.403741]  rfcomm_l2sock_create+0x2a/0x100
[  421.408157]  rfcomm_dlc_open+0x6aa/0xc60
[  421.412232]  ? rfcomm_dlc_free+0x30/0x30
[  421.416303]  ? lock_sock_nested+0x8c/0x110
[  421.420548]  ? trace_hardirqs_on+0xd/0x10
[  421.424715]  ? __local_bh_enable_ip+0x99/0x1a0
[  421.429337]  rfcomm_sock_connect+0x336/0x450
[  421.433754]  SYSC_connect+0x1f6/0x2d0
23:57:39 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$SIOCRSACCEPT(r0, 0x89e3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x1, @time={0x4}, 0x0, {0x0, 0x2}, 0x2, 0x1})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  421.437560]  ? SYSC_bind+0x220/0x220
[  421.443887]  ? retint_kernel+0x2d/0x2d
[  421.447972]  SyS_connect+0x24/0x30
[  421.451514]  ? SyS_accept+0x30/0x30
[  421.455150]  do_syscall_64+0x1e8/0x640
[  421.459043]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  421.464021]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  421.469245] RIP: 0033:0x45af49
[  421.472434] RSP: 002b:00007f0311195c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  421.480163] RAX: ffffffffffffffda RBX: 00007f0311195c90 RCX: 000000000045af49
23:57:39 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x5, &(0x7f0000000280)={0x31, 0x7f, 0xff})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  421.487616] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000007
[  421.495941] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  421.503317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03111966d4
[  421.511473] R13: 00000000004c172c R14: 00000000004d66f0 R15: 0000000000000006
23:57:39 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x121480, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0x80}, 0xffff}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
syz_open_pts(r5, 0x2100)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

23:57:39 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x66500)
ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f0000000180))
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100a9180}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x16, 0x1, '^}system\xf2vmnet1()\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x80, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_DOMAIN={0x21, 0x1, '\\-system@ppp1selinuxnodevGPL\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8048008}, 0x4001040)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:39 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000180)={0x24, 0x37, 0x2, {0x0, 0x9, 0x2, r5, 0x6, 'bond0\x00'}}, 0x24)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:39 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:39 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:39 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280))
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:40 executing program 0:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00'})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xb4, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000016c0)={<r6=>0x0, @broadcast, @multicast2}, &(0x7f0000001700)=0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001740)={'bond0\x00', r6})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:40 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:40 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000000000)=0xc)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp1\x00', 0x101000, 0x0)
setuid(r5)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2000)
lchown(&(0x7f0000000100)='./file0\x00', r5, r6)
r7 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:40 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:40 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L+', 0x8000}, 0x16, 0xc519cb63792e4a10)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:40 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={<r5=>r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, [0x3, 0x7, 0x40, 0xffffffffffff64e8, 0x1, 0x3, 0x2cb4, 0x822, 0x7ff, 0x9, 0x4, 0x200, 0x10001, 0x0, 0x5]}, &(0x7f00000001c0)=0x100)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r5, 0x200, 0x8}, &(0x7f00000002c0)=0x8)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:40 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, r0, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, r2, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
creat(&(0x7f0000000280)='./file0\x00', 0x10)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="c1551edd3e3f6dc7fb39949f1685fd545fe969ce854bfb2c5dc19289a72a97f30c2c6c3d56605ddb3225666091d2568a4c1fcb0afe41ae7c6b1703aade9a85ee3db6dc089f078c3aea8f0129df4c327444c1186e23d1960640dcb3ac66ddfc", 0x5f)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00', 0x2})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:40 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x400000, 0x10)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x3, 0x10335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0)
write$binfmt_script(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e5200220a000000000081d7e3a5ded5019039d0d51e6773295af6f2547c47d8e3cf969da8d009c3ecdb3472944c10de96f77ecf6ace16705dd5471ea057ce5fb151c64efc0376b8e213a97dec258e4c326117dc8fb58b3a49db2ab9f8e451ab70c5e7b3c4c009df77efb47daaec872a8984863b48b1bde0dd462d34edd86ad340566c9404103d3d1492b880054f30f83a27bf91ce663f4d4cc9bf"], 0x91)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:40 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:40 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  422.390123] net_ratelimit: 25 callbacks suppressed
[  422.390128] protocol 88fb is buggy, dev hsr_slave_0
[  422.400218] protocol 88fb is buggy, dev hsr_slave_1
23:57:40 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:40 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x2a5)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
llistxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)=""/91, 0x5b)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:40 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:40 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000180)=0x80)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:41 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x20000, 0x0)
write$P9_RCLUNK(r0, &(0x7f0000000280)={0x7, 0x79, 0x2}, 0x7)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$USBDEVFS_RESET(r4, 0x5514)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:41 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:41 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:41 executing program 3:
open(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
dup2(r0, r1)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x5b}, 0x0, 0x3, 0xffffffffffffffff, 0x9)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
fcntl$dupfd(r1, 0x0, r6)
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:41 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:41 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:41 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  423.211807] audit: type=1804 audit(1578614261.422:80): pid=26239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name=E91F7189591E9233614B dev="sda1" ino=18784 res=1
23:57:41 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
write$P9_RXATTRCREATE(r4, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7)

[  423.309315] audit: type=1804 audit(1578614261.472:81): pid=26246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name=E91F7189591E9233614B dev="sda1" ino=18784 res=1
23:57:41 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:41 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:41 executing program 3:
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0x3d, 0xff, 0xa, 0x9, 0xac2})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:41 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  423.590139] protocol 88fb is buggy, dev hsr_slave_0
[  423.595275] protocol 88fb is buggy, dev hsr_slave_1
23:57:41 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:41 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getsockname$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x337)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
personality(0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x11c, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:42 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:42 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:42 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  423.991101] protocol 88fb is buggy, dev hsr_slave_0
[  423.998123] protocol 88fb is buggy, dev hsr_slave_1
[  424.070151] protocol 88fb is buggy, dev hsr_slave_0
[  424.075284] protocol 88fb is buggy, dev hsr_slave_1
23:57:42 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:42 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/access\x00', 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  424.152314] protocol 88fb is buggy, dev hsr_slave_0
[  424.159004] protocol 88fb is buggy, dev hsr_slave_1
23:57:42 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:42 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000180)='./file0\x00', 0x8)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = dup2(r4, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x2, @time, 0xfd, {0x2}})
r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r7, &(0x7f00000017c0), 0xf8, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000004c0)={{0x2, 0x6, 0x0, 0xff, 'syz1\x00', 0x7}, 0x3, 0x1, 0x5, 0x0, 0x5, 0xa3c, 'syz1\x00', &(0x7f00000001c0)=['queue0\x00', 'queue0\x00', 'net/fib_trie\x00', 'queue0\x00', '\x00'], 0x23, [], [0xfffa, 0x8, 0x7]})
write$snddsp(r7, &(0x7f0000000400)="74c6910bbeb3c03aa9cb854e485020fb204892ea0ca85f17eba2ac45ff41c5b87624428f3ce2a802696300c24a3183e4f0d799827b6fe1f9a31cdc4e2e0e2e1743a02d5c7c75e1c10f03266a5ccdc2def2e8a0d59710732a51b39d05253d81ce2d65a4e45d3c97bc2dd1e1480f6fee17d818fb1624f0c742154081426a683855b59e7b186f", 0x85)
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:42 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:42 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:42 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0xfffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40d, 0x12020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8000000002, 0xfffffffffffff847}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000180)={'gre0\x00', 0x3})

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
getsockname$netrom(r0, &(0x7f0000000180)={{0x3, @bcast}, [@default, @null, @remote, @default, @null, @null, @default, @null]}, &(0x7f0000000280)=0x48)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0)=0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004090}, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x34f, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:43 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x7f, 0x7, 0x9, 0x0, 0x200, 0x820, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_config_ext={0x8000, 0x2}, 0x4, 0x6, 0x1ff, 0x6, 0x95d, 0x8001, 0x1}, r5, 0x7, 0xffffffffffffffff, 0x8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffd2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x30e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110802}, 0xc, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20040000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000280)=@llc={0x1a, 0x7, 0x7, 0xf8, 0x1f, 0x40, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000800)="f9c4c55a21cffe4366c4db4e2f88935420cfdc3d9249ff99ab451dfa2ab3b23afc69150e97e4e3988c3bceac5f17f90b56c9c0e985eb4f85dbffc5f374255e47e0d5da2a78a9dc35c3af2e26115f0b391247e3c46c63790112bd588812430989fdd571bbfa9a570c2a49d20608da3f133c08b0c2379fc649f58f2d1e55fd2f7aea057ac306f8c62a50c8dc9ae653ab8b8d831baba32fb447dc29a43355da38957fe1baf74a45e5b564463edd6ececee39b252490918156cdb4aca947916e0e59fbd5c6a71b4b15da97fb03af0cb83cc281528e8aa2aaf92fadf2a48c3a57cb541c80de64c653a6074cc24afb52ae40eb2432a085b1", 0xf5}], 0x1, &(0x7f0000000900)=[{0xa8, 0x1e, 0x9, "8c4c27de0b299a0e08ee902ee13979c416e5362ff219834c87f5751ea9fec9f720711ffd92729c3845a95c3c9a1e377c4f32c38388354fa1c2ff4bd13d680ef0afe0aef2e201ad5200ff337e9e12dfddf72ddab35ce5b7ac22ffad3d31133260e48a8e5e4ee3e0448b69870bff3eb512aa6749fa0a5fbec34b5c0ecd77d75e1be822f3f51cc45d00ce133f84b7c4486ef006428b"}, {0x70, 0x1, 0x200, "f1ae5b4378442bb4a39912020bbfe3b7423dfbefcf26cecb8a9a6d31304cfd7142016253a764d97c5345116cfded02498f4eb8d8d1d16337699fa761f795c54c70ae2470841f870b1abc1acbb56fee314499ab7240e7cf26b18fd14d97"}, {0x78, 0x107, 0x2, "a9e67faac8c6de6f80cd5f4fd7f6670ff702f946b943026deed84f29213128be87cab749e9ccee2942c00b7709cc67331523870a800dea1ead9fc728e67a0e66d914dfbbe738a109f681dd7a9a8867e651fffacae8d8c47397d6a43718fcd9f6c2aa92fa52"}], 0x190}, 0x40)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0x202)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000000000)=0xc)
setuid(r11)
stat(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r14=>0x0}, &(0x7f0000000000)=0xc)
setuid(r14)
mount$9p_virtio(&(0x7f0000000b40)='syz\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='9p\x00', 0x4020, &(0x7f0000000e00)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@noextend='noextend'}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@debug={'debug', 0x3d, 0xaedab98}}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@msize={'msize', 0x3d, 0x3f000000000}}, {@dfltuid={'dfltuid', 0x3d, r11}}, {@access_client='access=client'}], [{@euid_lt={'euid<', r12}}, {@smackfshat={'smackfshat', 0x3d, 'l2tp\x00'}}, {@uid_eq={'uid', 0x3d, r14}}, {@fsname={'fsname', 0x3d, 'bond0\x00'}}]}})
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
r16 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r15, 0x0, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r18 = dup2(r17, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r18, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:43 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0)

23:57:43 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:43 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x88)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x200)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
fcntl$dupfd(r1, 0x605, r2)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = msgget$private(0x0, 0x20)
msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/239)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x101, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000003c0)='vlan0\x00', 0x10)
r8 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:43 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:44 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000001c0))
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000180))
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r7 = socket(0x100000000011, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xc)
sendmmsg(r7, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x8, r8}, 0x80, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'veth1\x00', <r9=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000840)={@initdev, <r10=>0x0}, &(0x7f0000000880)=0x14)
r11 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r12 = openat$cgroup_ro(r11, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x7a05, 0x1700)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000008c0)={'team0\x00', <r13=>0x0})
r14 = socket(0x100000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = dup(r15)
getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
sendmmsg(r14, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x8, r17}, 0x80, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'vxcan1\x00', <r18=>r17})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r19=>0xffffffffffffffff})
r20 = dup(r19)
getpeername$packet(r20, &(0x7f0000000000)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
r22 = socket(0x100000000011, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14)
sendmmsg(r22, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x8, r23}, 0x80, 0x0}}], 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000009c0)={@initdev, <r24=>0x0}, &(0x7f0000000a00)=0x14)
r25 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
openat$cgroup_ro(r25, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x7a05, 0x1700)
getsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000a40)={<r26=>0x0, @multicast2}, &(0x7f0000000a80)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000240)=ANY=[@ANYBLOB="10030000", @ANYRES16=r6, @ANYBLOB="00082dbd7000fddbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="4400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r9, @ANYBLOB="080201002b2eb273e9a5d7ec9cc965a2f13a7d685fdaa137ef8501de5f70bbf677e2fc668670a33412069920485b175bcbd2e28dcb449b2442c69c110c3adfa77a1832df9a437acf6f7383606b70776109949cd70287e97dd9b23a1485b559277005ad432b542dd9c08e660d926d91e5ee0516d712828e61c9e77429d604f2824e0782baa1972f1402c7a01e9edd82f8a2d9dd23358a2461cd271f9e57", @ANYRES32=r10, @ANYBLOB="700102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400818100003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="3001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ff7f000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26], 0x310}, 0x1, 0x0, 0x0, 0x880}, 0x10)
r27 = socket$inet6_udp(0xa, 0x2, 0x0)
r28 = dup(0xffffffffffffffff)
getpeername$packet(r28, &(0x7f0000000000)={0x11, 0x0, <r29=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r27, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r29})
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000009b00)={@empty, <r30=>0x0}, &(0x7f0000009b40)=0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009b80)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r31=>0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000009c80)=0xe8)
r32 = socket$netlink(0x10, 0x3, 0x0)
r33 = socket$netlink(0x10, 0x3, 0x0)
r34 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, <r35=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0xfffffffffffffcf1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r35}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r32, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r35, @ANYBLOB="012001000000000008001c00ef000000d90a440d99b4a1f863f4caa6a3badfe60ab68b61cffe61a780078e3ca2b38d"], 0x28}}, 0x0)
r36 = socket$inet6_udp(0xa, 0x2, 0x0)
r37 = dup(0xffffffffffffffff)
getpeername$packet(r37, &(0x7f0000000000)={0x11, 0x0, <r38=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r36, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r38})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000009fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000009f80)={&(0x7f0000000e80)={0x298, r6, 0x800, 0x70bd27, 0x255fdbfe, {}, [{{0x8, 0x1, r29}, {0x154, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @lb_tx_method={{0x0, 0x1, 'lb_tx_method\x00'}, {}, {0x0, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0xffffffffffffff35, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1fff, 0x4, 0x5, 0xffffff00}, {0xffff, 0xff, 0xd4, 0xa}, {0x7, 0x8, 0xc0, 0x40}]}}}]}}, {{0x8, 0x1, r31}, {0x120, 0x2, [{0x40, 0x1, @name={{0xfffffffffffffe5a, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x1cc, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @user_linkup={{{0x0, 0x1, 'user_linkup\x00'}}, {0x0, 0x6, r38}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x1f, 0x1, 0x2, 0x5}, {0x2, 0x5, 0x28, 0x8001}, {0x6, 0x6, 0x3, 0x800000}, {0x400, 0x6, 0x8, 0x1}, {0x2, 0x4, 0x20, 0x3}, {0x13, 0x5, 0x66, 0x2a}]}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x42004}, 0x7fb65062d9892821)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:44 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  425.888289] audit: type=1804 audit(1578614264.092:82): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir158590580/syzkaller.UGkrSu/168/file0" dev="sda1" ino=18822 res=1
23:57:44 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = dup2(r4, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0xfffffffffffffd2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x30e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x110802}, 0xc, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x14, r3, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x20040000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000280)=@llc={0x1a, 0x7, 0x7, 0xf8, 0x1f, 0x40, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000800)="f9c4c55a21cffe4366c4db4e2f88935420cfdc3d9249ff99ab451dfa2ab3b23afc69150e97e4e3988c3bceac5f17f90b56c9c0e985eb4f85dbffc5f374255e47e0d5da2a78a9dc35c3af2e26115f0b391247e3c46c63790112bd588812430989fdd571bbfa9a570c2a49d20608da3f133c08b0c2379fc649f58f2d1e55fd2f7aea057ac306f8c62a50c8dc9ae653ab8b8d831baba32fb447dc29a43355da38957fe1baf74a45e5b564463edd6ececee39b252490918156cdb4aca947916e0e59fbd5c6a71b4b15da97fb03af0cb83cc281528e8aa2aaf92fadf2a48c3a57cb541c80de64c653a6074cc24afb52ae40eb2432a085b1", 0xf5}], 0x1, &(0x7f0000000900)=[{0xa8, 0x1e, 0x9, "8c4c27de0b299a0e08ee902ee13979c416e5362ff219834c87f5751ea9fec9f720711ffd92729c3845a95c3c9a1e377c4f32c38388354fa1c2ff4bd13d680ef0afe0aef2e201ad5200ff337e9e12dfddf72ddab35ce5b7ac22ffad3d31133260e48a8e5e4ee3e0448b69870bff3eb512aa6749fa0a5fbec34b5c0ecd77d75e1be822f3f51cc45d00ce133f84b7c4486ef006428b"}, {0x70, 0x1, 0x200, "f1ae5b4378442bb4a39912020bbfe3b7423dfbefcf26cecb8a9a6d31304cfd7142016253a764d97c5345116cfded02498f4eb8d8d1d16337699fa761f795c54c70ae2470841f870b1abc1acbb56fee314499ab7240e7cf26b18fd14d97"}, {0x78, 0x107, 0x2, "a9e67faac8c6de6f80cd5f4fd7f6670ff702f946b943026deed84f29213128be87cab749e9ccee2942c00b7709cc67331523870a800dea1ead9fc728e67a0e66d914dfbbe738a109f681dd7a9a8867e651fffacae8d8c47397d6a43718fcd9f6c2aa92fa52"}], 0x190}, 0x40)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0x202)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r9, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000000000)=0xc)
setuid(r11)
stat(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r14=>0x0}, &(0x7f0000000000)=0xc)
setuid(r14)
mount$9p_virtio(&(0x7f0000000b40)='syz\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='9p\x00', 0x4020, &(0x7f0000000e00)={'trans=virtio,', {[{@cache_fscache='cache=fscache'}, {@noextend='noextend'}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@debug={'debug', 0x3d, 0xaedab98}}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@msize={'msize', 0x3d, 0x3f000000000}}, {@dfltuid={'dfltuid', 0x3d, r11}}, {@access_client='access=client'}], [{@euid_lt={'euid<', r12}}, {@smackfshat={'smackfshat', 0x3d, 'l2tp\x00'}}, {@uid_eq={'uid', 0x3d, r14}}, {@fsname={'fsname', 0x3d, 'bond0\x00'}}]}})
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
r16 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r16, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r15, 0x0, 0x0)
r17 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r18 = dup2(r17, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r18, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:44 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000000000)=0xc)
setuid(r1)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000000000)=0xc)
setuid(r3)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r1, r3, r4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r8, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:44 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x9, 0x3f00, "c82b1b", 0x7f, 0x81})
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:44 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
r6 = syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:44 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000000000)=0xc)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp1\x00', 0x101000, 0x0)
setuid(r5)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2000)
lchown(&(0x7f0000000100)='./file0\x00', r5, r6)
r7 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='cpuset*\'self-\x00', 0xfffffffffffffffc)
r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r3, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, r4)
r5 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='$wlan1\x00', r4)
r6 = request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='cpuset*\'self-\x00', 0xfffffffffffffffc)
r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r6, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, r7)
keyctl$reject(0x13, r5, 0xffff, 0x7, r6)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000000d000/0x3000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f0000000800)="a12fe09cc3578fbbe10b1a4bb02b8f9fd8b96ee35f6c0cf9ef9085225b39019a81af398814f8ad48a41d9b7b512966ffc9ac050dcdaedb994c26f927e87cf7d6f15d3a6b86a0391de0ba360c300f5db28c413e0b9965efd385dafb56113a4ef387c189845dafb659f0e5a6fa9b7ee009bd1353d244eb5d73ac20ecbbe280484290da6bc4c54228f1b42b8d6f03c5ec7cc724c731e07721c28c5dc6eb40c44f1d033b0bc73d9888694bb32c7d991e7a092a4a7127ebc6efb9539ca30fd7d933ce6b627dbe3faf61c6de4b12351e5a95c6a63dea2297bff46dabeea8e658d147013155aa", 0xe3, r0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
fadvise64(r1, 0x3, 0x800, 0x0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000340)=""/120)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0x40, 0xffffffffffffffff, 0x3)
mq_unlink(&(0x7f00000003c0)='em0\x00')
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:44 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00'})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xb4, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa3b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000016c0)={<r6=>0x0, @broadcast, @multicast2}, &(0x7f0000001700)=0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001740)={'bond0\x00', r6})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:44 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:44 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:44 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="44e44b3691d9db86c16a829bca3ff737dae0b19fdf30a449ca7f62ffb2e0ef3f72f495bcd7aad5b7426b19418d797f5c6ef8102786144036d6805d6ea6d65bfbbda7e4f9a9255190d1257fc99a6983", 0x4f}], 0x1, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3df}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x90}, 0x4000008)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:45 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:45 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x80, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = syz_open_dev$sndseq(0x0, 0x0, 0x4000)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000280)=0x19d34, 0x4)
epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xffffff81)

23:57:45 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:45 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:45 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:45 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup(r3)
getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:45 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x1, 0x0, 0xf0, 0x0, 0x0, 0xfffffffff76327ca, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000180)='veth1_virt_wifi\x00')
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:45 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:45 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup3(r7, r6, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r6, r8, &(0x7f0000000040)=0x100000, 0x8001)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:45 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101000, 0x0)
write$nbd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="67446698000000000300000002000000cd8e11380a3fd1b24aa6fa1ff6d202c1d82f4b5b75df4fb8bd5f0ffd5ffc34b5b7a9b296a6dc1b5c8fbaa70f75efbc68f23ebf1c02d2c0c2f58218ed2e615f825e95eaa856b634c5a01274edbede1fa6311afba0cd92387ef750c5ba98c0b03174878dc903ff69ec4366c39278f03d4d8ac7a38010761fa4d68e59a3fd5ad584534ecbcf75a51eae671ce4ee95397e97b29e190f9d685222ea6d7e5e5c9bca230a3ecbf9eb946361ca2c541217023e91eb4f413a000000000000000000"], 0x82)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x4}, 0x0, {0x0, 0x7}, 0xff})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
unlink(&(0x7f00000001c0)='./file0\x00')
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:45 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100))
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x80000)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x1, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000800)={0xb, @sliced={0x5, [0xfffc, 0x0, 0xc02, 0x9, 0x5, 0x0, 0x6, 0x8000, 0x3, 0x8000, 0x4, 0x0, 0x9721, 0x1, 0x4, 0xcbd0, 0x6, 0x3f, 0xc5e2, 0x0, 0x9, 0x2f, 0x1, 0x5, 0x3, 0x0, 0x689, 0x8a0e, 0xd6ce, 0x9, 0x2, 0x8, 0x1, 0x0, 0x8001, 0x2, 0x3, 0xfe01, 0x1f, 0x5, 0x5, 0x401, 0x1, 0x5117, 0x4, 0x3ff, 0x101, 0x800], 0x8bb2}})

23:57:45 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:45 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
dup3(r7, r6, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r6, r8, &(0x7f0000000040)=0x100000, 0x8001)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:45 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:45 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>r1, r0, 0x0, 0x6, &(0x7f0000000100)='bond0\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000280)={0x89c154f4df43f484, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x20, 0x0, 0xf6800, 0x5}, r2, 0x6, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl(r3, 0x3, &(0x7f0000000340)="70f3c083e57b6f44990849f9713a0a99f5a152aaf034ce743648e2a8d158efeb0628b301629168f69792c0e049dd60ce63b91922f3b707c11f875e104760bb15c1b1408c177e4664779dc656fdf0e4a1958ff042b96636a728142644ae50d93fcac404d9ca6bc9f7278ad8a2dbbbd2c413c58b39aa548327110f9bce49d17d136c3f9a2de8d9cbacec81130f1b2c8a480a0afb1afcd56f16a76d05f502")
shmctl$SHM_LOCK(0x0, 0xb)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:45 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:45 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x0, 0x8, [], &(0x7f0000000180)=0x7})
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:45 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  427.543046] audit: type=1400 audit(1578614265.752:83): avc:  denied  { map } for  pid=26563 comm="syz-executor.2" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=17429 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1
23:57:45 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  427.750147] net_ratelimit: 16 callbacks suppressed
[  427.750152] protocol 88fb is buggy, dev hsr_slave_0
[  427.761092] protocol 88fb is buggy, dev hsr_slave_1
23:57:46 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/196, 0xc4}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000180)=':mime_type\x00', 0xb)
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:46 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:46 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:46 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:46 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x2c}, 0x1, 0x6c}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20001400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x88, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1b90e141}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="3c7d8543f2c0b900dda5a38bd09943d8"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4014040}, 0x800)
flistxattr(r2, &(0x7f0000000280)=""/89, 0x59)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @tick=0x7fff})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:46 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:46 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:46 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={<r7=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000002c0)={r7, 0x0, 0x2, [0x1, 0x0]}, &(0x7f0000000400)=0xc)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  428.160115] protocol 88fb is buggy, dev hsr_slave_0
[  428.165706] protocol 88fb is buggy, dev hsr_slave_1
23:57:46 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x520541, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'team0\x00', {0x2, 0x4e23, @loopback}})
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  428.230187] protocol 88fb is buggy, dev hsr_slave_0
[  428.235607] protocol 88fb is buggy, dev hsr_slave_1
23:57:46 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:46 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  428.320139] protocol 88fb is buggy, dev hsr_slave_0
[  428.325770] protocol 88fb is buggy, dev hsr_slave_1
23:57:46 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000019c0))
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
sendmsg$alg(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="a2dfe072f123e119fe64c1221aeedecd597c0ef0345de45dd8b618f8db6cde07323b6b82b4e3642bf7c2270ab418", 0x2e}, {&(0x7f0000000340)="5c5ea3a7b4febc2f3d1c19b4351c90db4a7b5b814e1d33ba79e7dec43ff06d7292c785a2551fc77b3f489898ec4839f790665d8682ab24964165cb1990ba92517fddfcd9032d4498d84eae3e278a4cfa712fb461cae704906f3764437226a07922727e73c1561ee4af56e01b097defe47f1a23f1584e3067c2707916a3ed0a76cb344a7a939006bc6f", 0x89}, {&(0x7f0000000800)="a1599d83184f5ec2ee4d8e76f9b261ca99b70d865a762bb4d0ffba1c18c867bb7b48aa6e4b89ebcbbc8fa1e2a0d0c4fef5b8e773a76693d089cff9ff0ebe0150fa74f9f6e4382a86204084708e7703ed22037311a79185881b1b27b7ddd96d85376ec5f96ea38bf2347ac5565e9ba680a37fabfd81598412d9dbde223d42e004140e7f58724dc604d862673cbc949cc573692af6a4423bd73ddc59368a03507d1c1a8c2ccce2fa0777571333dad27d62667bba501916b8aed81dd08f4f24560e7b1b8dffd8e696227eedec0ef583aa6a3a1b28e788e41a5d848c062a151ed9fc7e2ba8a878c0da633ef029602da5d70185", 0xf1}, {&(0x7f00000001c0)='n ', 0x2}, {&(0x7f0000000900)="738e36c0937c3bde549af6fd990626de6b5c120c5208ce8d0ea8d5fdbd538176b76adbeebad77fb609850551f2ffe6402883caeadbab7a807db9280285e6380a7a71305f207e33722de45b23b3f44ba11ee9ccea864db68038ee6b0e631b6704a58476314777e093c58f43aaeb69cb731f69d91e58add89592fa09921c11bf2b30f4a23b497eff9c5e18704d65f1c6d502e3e6ed7b19fe0ad917b736de0a29ac2b9ebf4652907731a20c0ad616335fb856dabef8ad1e3e5cea74083abd1657ebd430c94cd3aeea416daef5bb9cca9b12041593b75ad86e878da5ea5d7b8e4a203a1c2a2a0f37df86cbf77263e366687bb8468011f4e319edeb9e3b6ffe633082066b69a9c63ec34abf5d3568cba77dbeaa09cf9b8bad0cf671a519d4fa730a5322033561bb912f59d9091905b21e1d697b48da1353fe49a55783a777cf65c03d5f0d3320cbf6b4f77062394326773f873be234a1d93622217da4b08f6d2e87dca8db581c2f78ee0f1dbc06ba6d2609b4921c7e2992121098a04be9bad69f3acb2e3c82a1851428203f0146927de7cd4ecd129473004774b883d1c0d6e1367a96cf02f2a5efcb137303cffbf060652a6a309c2d364940b27ba5b3b49c5b9e4f7adf0eb897663255ad21e3e2acc6b04ad2b12a8e64f3535169ed6b2f4f3fafa376f02652d6985eec7d07e51737247f67ad8877d9bfc7d4ab49b1c19bb49ebaa444d4efd1836171ff3479176b1d6905da889639463b2629a43f040f774b21797f9a8f3a59f3f29a282784717d006a1cf1f74031f9b90b25cb4b81c191fe1f0fa3aa6fa55df8ed507c754efffc685233a4b167bf3ad8f8cc7c1b9c72d15a3e39feb21672a2c71e151476bb74a24a96940cf339bbe7ab24fe05fdb8f3b9c40def9dc11e6e0a390011c81a1da59ddbb9bde0624ef8275d4c0095a6da6704cc79b6f248c0fe72b4f134baa19ddef474ca2cd8997f9cec79f3a54b4c616fde5f0bc769d0efa7ce75ae29d3770ae95e9f0627116fe4b92c10453ec8e7a72a75febd85dc7bc65466d8e3f2f0af825db995400684a65ad714ceef9669c594be1cf6424d2b924b48bd2b4f3f064d55bc97b2e8fe73fa1f92e77fa1a0cde9a882512933c1f1afb8608519e9116a12edfaca1316bc8b84b022f2b3cc6021b6cd6ecef88fb53d2b136a5c09f1ebac9643f4247564888a5bf1f0b751db063d6714896ffacb83b6aa1cd0690116bc173b78d1da9c01bbf7a8bce50e2e742a0b861bd5489cbda0e72ff76f1da23c5457de07d1f86ce22b59190af8825e3749b7209ec51d6d417afb3f6f8118f25401f8050914ab2a43b83e2e2bf4a04cea135537454d6e62a252098074d8b81bf1e2b56908682a4c86157cfcec6dd06087bfc274c3f4a3353f40f240ab665ab2256d5f07e8eebdf3e68bd4a98e5ac7671f58aa738043339acbbb9d54a84c7d039903096d9590ae7d5c6cb75c2f797f066c01baac010a59f35138785209d72a4eb2f74defcc8a2e17d97e94a3da46c5796d3a7b577e1d490ac3ba337caa02f88a11b9de299ce4a6f377f663c6a3ed2a23de9c355d57dfa9c33008cc5f4ac27319c3db3bb67f7fa6d900a50b4ce3620c8f2abbfb1b4aef1dfc16815686e315d900c89d518ff799d5b2b9af972860f12828c707a0d9a099d0177c85d5c8be67f170aeb3bf051f9a2d70a0e52b62ffaa5a11bfd01c9477da6ee963416a54a0cdbcbe61ff8910abe79805f6af45433c5b83dd19f6e06d5cc22c373b23d69b6bf7a6d17250d9e01a60d05df21fa34138d3c3a7b2ba14396fecbb36a9d8d494a7000fb99bdaf9475274b7fec7a3541df095c570a9e5506bdc73efb945c63da704feee2d304079c49560a95f1b63a75c0c35e86f8d7adff51a4289ec9db5fa5bf7401ea96b5de9fdb438b28a1048608d54bed1e8217b7f72e7b8dbe840a389af0f60187962e4ea8b1aef9192c1a303ecf2324215ba91c5e338d1a9da9bf255c3ad697cf5a194cee915150333b8a20506a9d5c8a661ea541efec6926568f7dbab93bcfa1914749ee3cec50e349f07e1c6b976b9cd77eb1bd38e8f95f9f3568f483368ab71cdd60c956552776fa55bea263aaefb31e86c85a5e6f48456a5dede3cb259fec03171d5e73f552f0f62943ce094ed55dd1b2a7077a637ce11d8ed5f13c351c617a9aac01e4d1a17feefe707ff89474df9cdf0113f95c1d75a50d124c9f5a8b0b6525e4e59d406c076cec1c22a14d55e75edf3b43cb93995e9a00da353c366e80eddec81c7e4d7356f77715f88b6bea83e0116d16941e8d27e45ad9c09d9d1c26aec2be8140296353755f800b8288e67857a1d91ec9573e3e2ca3af60cc31c80f40c0881916d67e982582f952f0a72e3e9301ceb4d075f1fc6edec1eb009a260da5f3f13f003a4b90a5bcbbd7e98bde0d8b649d1f5c277893e3d6c662b892c8f7da8b2a29b533569969fffa373ab3ff8d52cc9f25684824f8df1fce2ce3c13aec4ce3afc7c3fbca73e053d073f2ddb81c5c8d14a75800f6dab95385dfb48855d0391da2f9012d3a86ef704505ebd1d6285e8c63f38f8bc047b40593ca7cc4606aef85701bd272ec6cd0a961460247986caac33cbab1c013efb9aa55d2d21baa6d1c5c6d3ce9d89978709444fdb26860e9ac8f126f1b49f0edf484b060689c5784318fb5d23def9e79a229acb8c9e9e416c503c97c588f24f7afd929f04b616bc98c5f3e2264c3fd3fe4672970242ac8b0d6eebfd9bd4f7538638528a8c70291b4e46191aa085baea2f0e4e7a736fdb8a8255dfb2fba9de8dfaade47accdeb13642bda0d4ebe5540a4be24159585dcb42490e6e95db6cfc0f0488f4c250dd28359969fbb2086b87b60730f7038ca405ba10af2359fb43d1210f35e0e89afb27f4963966b5183b8f440db276ff16720253d5efacaebe1fa7cd9cc5874d84c6688e305cf45ba48a702caad62b807656c877ee1b7efce7b1ac846cace9d2c6ba223ab73c821a0b014b11a190d786f11b7798c1fb363e7a066b9b6f756857122cec9eb745890f730bcc9efdc74f4b904ed6be45342a3bf3e5b654386b4763c1354e5594ca9f966bcc48681e3cc0bdb4d9158ca98b79309b5fe128730ce9c55a692aba69faf0b3e2720966cbf797db404b18681d6517835b8958382fddaa575344314576ae3ef3b491df16e2f2ae9da35b4636b1604e8d6a5fc937d585d84e1c74ddbf4f518fff0342557f68341d23cdc2c01165b55548ba678a4da4f44fa70d2e05df194fc3135d9ffcdb7cdbf35f8158dc00abdf0b5c7790c4ce827919a18943017ffc87914801f3893d6c9b68fbf8c3be3ebbf94e4bdf27d9fe1da6b9fabd89048d462918fb3ca458ea8aa9b32800a13be8028987f89b1a6ef7a6daeed2cf77797a299b2bc6504eaeda9273c6c615308f72867e84c1082f1047df5703f617d65485b79c35e86221ac835ece80a7883abb1902c7964bb26d0b4402c499eede6f80e751705f47ce25f76931b85bc5ece178c5835a20e1688281e8ae17fe9e6506c35c8119c33b625470f25bcaa837f5f2869d96b345047ca7e15a147592b354b917defba54274d9a932c77d471dda91c900eb2e3b4f2ad4fa96dbb7bbbfa994f6de0f587ecff6cd7451ba5cf26ec216e8b88735f901bebd3c2df6896055c03d338f1fbd4cb4f741cc9b0fb0c3d271ff54854b8d6a1c6cb4fe038dc6605eb8d820f857a8b6ac56b667dee12e14a9459ec244153d6982133e0dc568206a924e242896d222683ea0332a5f7baa1dd90445d1ca4e69d649e9e6f81b4b9f1ac14a8c7dbfbfce7bd9294c785bba1e0bd8794ce04d43a036991d990fa5183047a14662aa75735684e2a14cfe7eacd5d94a8b09550741e388aed94e39c066de990f6ef2d87f300b0c6a93ed34207fb0fe628eed3bc50890ab54b62118a8a85ea22d696d44471b683549b1d0c5100096d432478d6945c16a75d6ded4bbd2a6d4660c7844bc8469e51eee329ddd6162d34f9600f4ac5efc746f022b8025ad81980749c206482e2f3674ecb6509c5210e937fef81b8469417f0cd91f560a0370958811efe6dd14d49c1d6a20af097d6bc1e3842c7b99325d0dfdfe66be41b582d67dbbb773a4a15e64007ddfb33ae8424313c914a6002942b22ec5b630f8f9e1f5c3bf62484650c7d5fb1e4bdd6f3687e70715b90d4abc7bb91dc6b95126767960d7059503516e946cb831d5c1f2f92fc2e36fa2e89d9377fddd7c7ebcbbf52586c3ac190283d031dc0e4eff27fd1453daa460249f814b06ae90ce73c3fd7c00d7b3f57a6441c07da4c693b7d8cd9c0676de4ab5a4295e4ae2ff80fb1edb0a12c430c211b60d519731c9bda403cb24045e302bf859bc8207c405ff57b41fc61079d2edfb06b808df1538ab647ff017084b403e3eb48de6c4e27b78695d32f666857bea52b2336265e6c181b2c888d280b7b363a2b9e7c8420fec483e1b45e53526818d18225aa98adcddf4cbda10fc11744440d29f2c2cd75766bf3a1be03171a299d30747351fe78e66250682cb08a9a4c835beb7cd92de31f268d34ae1fdfde845c0edda06a2643165747d202f08a58e0a1da4574767abfdeecb6fe2865b199a543194ca7f70b6e03b7dafa91b369f4360c7f2ebcdd13a0826f835f84248b36d9beeeca25e411a8187b91aeb1fb89a0baf2c425bb28561b33de32dc67de6cc4e1825ac601a9db4cec5a1cdfa9d88dfec0fbccc67be4e341fe0a30bdec432039e6d9e1dd1d9ec8d142f99ed8cd59e760edc60da37cbc0998b6aeecd7d289976aa79aaac83fca84efa2c2d492f6d328d3bb8c278bcf7f4ccdabd9f566d9b2fa7e7c42ba85f3d50ad61fe1ee61c7ca7b985bd8182c581561efadf0874f187929418be06461acd5b624b441d0fd76ef01aa9a192ef8bb0769ff367867c11853c9d31b6b81b9bcba22ffb9b1317ddc84cbfe06c713b870d64af6230cc33bed5b1de224ac19048f9a5ccab7bce7eaacbc89e2d6469d794f3c122e4a5f2aea7a2fc2c6303c20f383b94a7352772d6a52fca2fba8355fc375ed9fa3848400a406299187111452f94c946f119e513a520c0ada8b0beba0d4af4919a914a435e88efc30fa29929be4f37f02b436edfca09f2180da8fe923e9f1de09a1ee2a25dea08d5752a0457c51cf848655f1f21c69a192f1054f42f4fd5e1468a4e7b284c253980f7befdc979850d8f26969861a321929f8dd713bc8464e14515b36056d205e28d218b72b9883ace616c56a54488650890ded557fcbbd300923edec3ad7a42cdd4759594f34422ee165d60741a4e05e406f35195597102640eb21b44da2e5dc2fe73406d8594953197408d56fca743bae72522621c61bd75d0fc326bb6ea5edb3c6b38016cb00db4da4f880aac757ab04ba1f498c17addcb1ac69a9dfabcb7a32cb2757a703003d9c20b60acc56039480827238eb69c77fb7544e0e554f52c7cd948fde152848dbaaa72d60ffaec79bf8f07706a8b148c2172f8523ca4d80d51a586a997ea359de0376222d7fd8e7da2a2e1255746b277a159fca3434ce84481e67d2879a1906972951550f04822e9ad196d077aca3137d342ae0639a33f6754953dfa76308e5e516e5a444c4ee2a7a4599bfeec4df053fb67edd74572c1b1fe7f3a577f0380b87b4f8c6a0b0cdce8755a102e580caf3c17bbf11a00ca88ea348bedb77c3db8af53126fb0392af6ab057c8330c2ef4a16ec4f911f95cbed2fd64f00e329a9362f18d71b404f7b8d584ff5e60dcaf0f8618453ceb70f86befab64d7d58acb35d46", 0x1000}], 0x5, &(0x7f0000001900)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0x30, 0x80}, 0x8000)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  428.390105] protocol 88fb is buggy, dev hsr_slave_0
[  428.395285] protocol 88fb is buggy, dev hsr_slave_1
23:57:46 executing program 1:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:46 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:46 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x400c080, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr="b7c42d2812734c548ed3e32e7c8401dc", 0xf06}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:46 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:46 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
dup(r3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:46 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x4000)

23:57:47 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:47 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x2, 0x0, 0x3ff, 0x1, 0x1000}})
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x66500)
ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, &(0x7f0000000180))
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100a9180}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x16, 0x1, '^}system\xf2vmnet1()\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x80, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_DOMAIN={0x21, 0x1, '\\-system@ppp1selinuxnodevGPL\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8048008}, 0x4001040)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a6}, 0xbc6ffc48c1e7538f, 0x40000000, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:47 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:47 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
write$selinux_load(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1010)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:47 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:47 executing program 2:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 2 (fault-call:8 fault-nth:0):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:47 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
dup(r1)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:47 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000400))
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000180))
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  429.609134] FAULT_INJECTION: forcing a failure.
[  429.609134] name failslab, interval 1, probability 0, space 0, times 0
[  429.673642] CPU: 0 PID: 26742 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0
[  429.681976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  429.691722] Call Trace:
[  429.694446]  dump_stack+0x142/0x197
[  429.698906]  should_fail.cold+0x10f/0x159
[  429.703163]  should_failslab+0xdb/0x130
[  429.707740]  kmem_cache_alloc+0x2d7/0x780
[  429.712267]  ? check_preemption_disabled+0x3c/0x250
[  429.717478]  ? retint_kernel+0x2d/0x2d
[  429.721487]  ? sock_destroy_inode+0x60/0x60
[  429.725852]  sock_alloc_inode+0x1d/0x260
[  429.730551]  alloc_inode+0x64/0x180
[  429.730561]  new_inode_pseudo+0x19/0xf0
[  429.730573]  sock_alloc+0x41/0x280
[  429.730583]  __sock_create+0x8f/0x620
[  429.730593]  ? retint_kernel+0x2d/0x2d
[  429.730605]  sock_create_kern+0x3b/0x50
[  429.730619]  rfcomm_l2sock_create+0x2a/0x100
[  429.730630]  rfcomm_dlc_open+0x6aa/0xc60
[  429.730644]  ? rfcomm_dlc_free+0x30/0x30
[  429.730655]  ? __local_bh_enable_ip+0xc9/0x1a0
[  429.730665]  ? __local_bh_enable_ip+0x99/0x1a0
[  429.730677]  rfcomm_sock_connect+0x336/0x450
[  429.730687]  SYSC_connect+0x1f6/0x2d0
[  429.730698]  ? SYSC_bind+0x220/0x220
[  429.738606]  ? check_preemption_disabled+0x3c/0x250
[  429.738619]  ? retint_kernel+0x2d/0x2d
[  429.738637]  SyS_connect+0x24/0x30
[  429.738647]  ? SyS_accept+0x30/0x30
[  429.807799]  do_syscall_64+0x1e8/0x640
[  429.811991]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.817142]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.824740] RIP: 0033:0x45af49
[  429.828517] RSP: 002b:00007f8746248c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  429.837419] RAX: ffffffffffffffda RBX: 00007f8746248c90 RCX: 000000000045af49
[  429.845151] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000006
[  429.852539] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  429.860345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87462496d4
23:57:47 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  429.868586] R13: 00000000004c172c R14: 00000000004d66f0 R15: 0000000000000005
23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
dup(r1)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:48 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
dup(r1)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:48 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x48020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000280), 0x10}, 0x20000, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000180)=""/117)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0xc99f134946096646)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x1, {0x6, 0x4, 0x1}}, 0x14)
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = getpid()
perf_event_open(0x0, r4, 0x10003, r3, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5})
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = dup(0xffffffffffffffff)
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)

23:57:48 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x0, @time, 0x0, {0x6}})
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
perf_event_open(&(0x7f0000000200)={0x1, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x109040, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
dup2(r1, r2)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x80, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x280, @time, 0x1, {0x81}, 0xfc})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:48 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = dup(0xffffffffffffffff)
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'bond0\x00', {}, 0x8})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x60, 0x0)
r6 = dup2(r4, r5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:48 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = dup(0xffffffffffffffff)
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)

23:57:48 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0x2, 0x81, 0x8, 0x3, 0x5, 0x6}, 0x3e8f})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:48 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r4 = getpgrp(0xffffffffffffffff)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3, r4})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:48 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000080)={0xffffffff, 0xf, "e3d35b53675aacbd7d7686d682b760aa65a62932601a43a61cb7664177e164c5", 0xff, 0xe53, 0x7, 0x2871, 0x11})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x20})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x28003)
fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, <r4=>0x0})
get_robust_list(r4, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f00000001c0)=0x18)
r5 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0xe808, 0x0)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:49 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2, 0x111)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)={0x1, 0x2, 0x4, 0x200000, 0x9, {r3, r4/1000+30000}, {0x3, 0x0, 0x7, 0x7, 0x4, 0xff, "b0fd4eb4"}, 0x0, 0x4, @fd=r5, 0x3, 0x0, <r6=>r0})
setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000002c0)=0x34, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
r8 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r9 = dup2(r8, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r9, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:49 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x100)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:49 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f00000001c0)='./file0\x00', 0x8c)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000b00)=""/133, 0x85}, {&(0x7f0000000100)=""/63, 0x1d}], 0x2, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000009c0)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000a40))
mq_notify(r1, &(0x7f0000000a00)={0x0, 0x41, 0x0, @tid=r3})
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}, 0x0, 0x6}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)=[&(0x7f0000000080)='em1}posix_acl_accesskeyring\x00', &(0x7f00000000c0)='queue0\x00', &(0x7f0000000c40)='\x7fpp0\x00\xe8\x05A\x95\x88e\x89\x8f\xe1<\x88=\xec\\\xe7l\x0e\xa1\xebob\a\x1e\xb6\x9c\f\x8d\x1a', &(0x7f0000000c80)='queuw0\x00\xb1I\xe8G\xaf\x81\xccw\xe0`\x9b\xfd\xfd\xccQu\xec \x9f\x17\f\xfa\xe2D\x86\"\xde\xabT\x12\xb5t\xd3\x9cA\rW>\xa6\x01\xf0\xe7\x05n\x05\xa2\x1bn\x8aha\xe1,`e\x8b\xa0\a\xdf\x9c\xba\xe4\xe4\xe3\x93\xf3\xe0y\x9cXH\x05\xca\xa4\xe2\xfc{\xda\x05\xc67K\xa5\x11\xbe\xda\xcc\xace\x8cP\xef\xbb\xab\x01M\xae\x84\x06J\x1b\x9a\xa0\xb2Q\xb1\xe8\xb1\x17R7\xd6\xe4\xe2\x8d\xe8\xee\x92', &(0x7f00000001c0)='[selinuxtrusted\x00', &(0x7f0000000280)='queue0\x00', &(0x7f00000002c0)='queue0\x00'], &(0x7f0000000940)=[&(0x7f0000000840)='\x00', &(0x7f0000000880)='\xff\xff\xff\xff\x842\x00', &(0x7f00000008c0)='queue0\x00', &(0x7f0000000900)='que+e0\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000980)=0x200, 0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:49 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x8, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000180)='bridge0\x00', 0x7f80, 0x4, 0xfffd})
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:49 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hfs\x00', 0xa80001, &(0x7f0000000100)='queue0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040), 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:49 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
pipe(&(0x7f0000000180))
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
mkdir(&(0x7f0000000280)='./file0\x00', 0x40)
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x406400)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:49 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:49 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/27)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x2, 0x2000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in, 0x0, 0x0, 0xff}}, 0x28}}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:50 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:50 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:50 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x8001, 0xe7, 0x7f, 0x20, 0x14, "6751fc87c4ed7add"})
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000680)={r7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, {r8, @in6={{0xa, 0x0, 0x8, @remote}}, 0x1, 0x6, 0x0, 0x1}}, &(0x7f00000005c0)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r10=>r7, 0xffffffffffffff46, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0xffffffff, @local}, @in6={0xa, 0x4e23, 0x7, @rand_addr="f74d6e6d37c61a45c56a550b282ae8f1", 0x9}, @in6={0xa, 0x4e21, 0x2, @local, 0x6}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)={r10, 0xa0, "21cf8645feb9d7df658f9c27d8957192e89180018b905e5aa5ba6a2ccb46a6de566f4bd4c65c4f03cffcebbf8948bdc66c0f6fa701bd20ffe7d5c6abf0e84c2bf2c08b37ca9d0c5c3c069d4fa9067953aaf39f7470034e246a820eb3c62c314b55294656fa04f030981fcfa3a1d34059167f6c359059344cc5eaf69ad6f85f4a005de72a87bbb36fc6ee9382c6a992d1b345dae54544a8797774a67fe116d48d"}, &(0x7f0000000140)=0xa8)

23:57:50 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0)

23:57:50 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='vmnet1vmnet1]ppp1\x00')
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:50 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:50 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:50 executing program 5:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x100, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000001c0)=0x5)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x42972f0d5d4b6c47})
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000003c0)={r2, 0x2})
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, {0x0, 0x3, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x6}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
read$midi(r6, &(0x7f0000000800)=""/224, 0xe0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:50 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x9, 0x0, 0x10000000009, 0x100000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0)
sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x5, 0x10, 0xb636, 0x4, 0x3f, 0x31a, 0x0, 0x7}, 0x0)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r5, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000280)=r5, 0x12)
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000800))
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000100)={{{0xa, 0x1}}, 0x8d, 0x8001, &(0x7f0000000040)="da683d16990509a6c7792b41e1c791423aa77433ff1ff843145d114ae9aba53eeadd31f2d1154d6a1184b966b11036a639f68957c9ac24c90a1e8ad7bfeab11a8e8d85a17f01f3cce65a46eaae1727ecd57cf9dd4de15d85a597f30e7a09b17a2f8fd5b3258f027329de9ebab6ca6f616aaa62d393988d8f413769be2153897bd80c41070248e1f4c99d61a2c3"})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:50 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0xfe, 0xfd, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
write$vhost_msg_v2(r1, &(0x7f0000000840)={0x2, 0x0, {&(0x7f0000000340)=""/156, 0x9c, &(0x7f00000008c0)=""/52, 0x4, 0x1}}, 0x48)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0xc43, 0x80)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0))
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r7 = shmget$private(0x0, 0x4000, 0x200, &(0x7f000000c000/0x4000)=nil)
shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000000280)=""/105)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:50 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:50 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]})
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  432.800139] net_ratelimit: 25 callbacks suppressed
[  432.800144] protocol 88fb is buggy, dev hsr_slave_0
[  432.812354] protocol 88fb is buggy, dev hsr_slave_1
23:57:51 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xffff)
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
pipe(&(0x7f00000001c0))
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000100)=""/39, 0x27}], 0x2, &(0x7f0000000840)=""/61, 0x3d}}], 0x1, 0x40002000, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
get_mempolicy(&(0x7f00000002c0), &(0x7f0000000800), 0x6, &(0x7f000000d000/0x1000)=nil, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:51 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:51 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x2})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1000, 0x400)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x5f, 0x18, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x9}, 0x8)
r5 = dup2(r4, 0xffffffffffffffff)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)

23:57:51 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:51 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x4, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x53, 0x2, 0x4, 0x5, 0x6, 0x81})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10)
accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x80000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:51 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x438c00, 0x42)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x1d, @multicast1, 0x4e20, 0x2, 'ovf\x00', 0x3c, 0x1, 0x50}, 0x2c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2000)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000800)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r7 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:51 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', {0x80004}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x4, 0xc9, 0xf3, 0xff, 0x0, 0x81}, 0x3}, 0xa)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000800)=""/214)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x5, 0x8d, &(0x7f00000000c0)="297d7e41f353a2394e4209983184d13b17e8d2ddf6e89d69fa99fc2e39f75e22e08a752880fe1d1ae31eb460b31fcf7ca858bb49b374266b29105365be2f216cd5bbc79c3ac19aeb58eaef7de7d57caf4981ec70c74cefcaf4f20e461897e6b7634f342feba307d5ebd6c3a83451d7793803d7581be9ca46530a88460123dd8aae138bbc77e800106ed28cf67b"})
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000280)={0x4, 0x1})
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl(r6, 0x1, &(0x7f0000000900)="34a5296843aa90bb2711dd0af8b1159f27b6adc49182d9103dd26faafa103c41f454beea603cbf03aff2d36157e8e3d6f9f684b37ed3ba0d9a3de8e612107a87013dcc95a5dcde459d7a02f3b0a9ca49278073e82d8f95f5b59d5de63ecb3b2ca00946318436b1908ddfda60fa56f67f99be3ff3746cb73f14f10676bb05f2fe6beb7e0642527f77978e9a1399ddb7236d88098b315098bffd6845600047410d")
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:51 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:51 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:52 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  433.991072] protocol 88fb is buggy, dev hsr_slave_0
[  433.997191] protocol 88fb is buggy, dev hsr_slave_1
23:57:52 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x73a4ab8f1c4f2524)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f000000a000/0x4000)=nil, 0x6000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:52 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:52 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  434.390111] protocol 88fb is buggy, dev hsr_slave_0
[  434.395365] protocol 88fb is buggy, dev hsr_slave_1
23:57:52 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
bind$nfc_llcp(r1, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x5, 0x8, 0x0, "ad5f5c15f9e902667dd51257db8b12253b6462797c47a0b8648aa124146587bb9c4f921cee6d4f60c2233ba01783e993ba2b2eb4359725831707c00773d86b", 0x33}, 0x60)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
keyctl$session_to_parent(0x12)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  434.470896] protocol 88fb is buggy, dev hsr_slave_0
[  434.476713] protocol 88fb is buggy, dev hsr_slave_1
[  434.550133] protocol 88fb is buggy, dev hsr_slave_0
[  434.555309] protocol 88fb is buggy, dev hsr_slave_1
23:57:52 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x4, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:52 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:52 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@mmap='mmap'}, {@fscache='fscache'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'posix_acl_access'}}]}})
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000c00)={0x1, 0x0, 0x3, 0xc, 0x3b, &(0x7f0000000800)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000009000/0x4000)=nil, 0x4000}, &(0x7f0000000280)=0x10)

23:57:53 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  434.845287] 9pnet: Insufficient options for proto=fd
23:57:53 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x0, 0xa6}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10800066}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="26dcf8e3ec6570924a5863f84761cb382a83671b0ec4defbab16421fe87afcf39ecebdc711ebfbc2b9a5cb2a1f196cda4c128adba7aeda9d4703f58a280c6f8f5748239c470974f1f1a660b620d80010000056424571851cbe928df730aadb7c1524df9a9d9bca25ffcc0e86e4414fc5c29167e0cd4e110fb13946fb84a1a3958781d083eea98ca1ac12edd8ba", @ANYRES16=r3, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x44055)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000800)={<r5=>0x0}, &(0x7f0000000940)=0xfffffffffffffd3d)
ptrace$cont(0x7, r5, 0xffffffffffffffc0, 0x335)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r10, &(0x7f00000017c0), 0x199, 0x0)
write$FUSE_INTERRUPT(r10, &(0x7f00000001c0)={0x10, 0xfffffffffffffffe, 0x3}, 0x10)
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f0000000140)={0x0, 0x7f, 0x2, &(0x7f0000000100)=0x8})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  434.912557] 9pnet: Insufficient options for proto=fd
23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:53 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:53 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r6=>0x0, <r7=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000001c0)={r6, r7/1000+10000}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:53 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x2000, 0x200, &(0x7f000000c000/0x2000)=nil)
shmat(0xffffffffffffffff, &(0x7f000000b000/0x2000)=nil, 0x4000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x9, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:53 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x8)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f00000001c0)={0x2, 0x80000001})

23:57:53 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:53 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:53 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x1)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, r2})
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x956, 0x1}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x7, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:53 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x28b01)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:54 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x0, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:54 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000080)={0xc, "b8463ea1aa7b065c0868db8bdcbd8fef13ce22200074f79ecd57b41ce47203c6915a1fb0be1c32295d11fb2d0802b7ebc502a0e799d975729b53cb0f74bf9e5b14435c279373d8b3c915c4ea4b549c4cd5efad8c3776ff531c461eaec24d6443d5fb0a4cbc662e6aee3f4cc9f49db749ffc9b990c72636711c5383adf6d4f2de"})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000280)={0x80000001, 0xa, 0x4, 0x204000, 0x8, {}, {0x1, 0x1, 0x81, 0x4, 0x80, 0x5, "e26a32b7"}, 0x6, 0x4, @userptr=0x1, 0x1, 0x0, <r6=>r3})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x2, 0xfffffffe, 0x0, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x0, @tick, 0x0, {0x0, 0x7f}})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:54 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x101000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000800)={0x4, 0x5, 0x4, 0x7a7947f8a14671cc, 0x400, {0x77359400}, {0x5, 0x0, 0x81, 0xde, 0x2, 0x1f, "a0c2f64c"}, 0x4886, 0x4, @planes=&(0x7f0000000380)={0x5, 0xe7ac, @userptr=0x7, 0x5}, 0x3, 0x0, r0})
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x5, 0x2, 0x3e, 0x64, 0xfd}}, 0xfffffffffffffe84)
getsockname(r1, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000100)=0x80)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:54 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x0, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:54 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x0, 0x1000, 0x80, &(0x7f000000c000/0x1000)=nil)
shmat(r0, &(0x7f000000a000/0x4000)=nil, 0x2000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0/file0\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="5e9c983cb1c4d50e3a50612f10f853c9323ee22a3f98df38d0c7067b858b17800c350540e37897619eab8c7db384b7402dedf3485921911b8a4597", 0x3b, 0x6}, {&(0x7f0000000100)="f9a0a0e27991ab7bc72f42d1226091271709006c04e153c4612d61e9cffd9595c5ab639d7177a2ac3bde480043bfeaf2c7502f2d1ee75bc2", 0x38, 0x3}], 0xaa0603df181b5811, 0x0)

23:57:54 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x100058c7)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r3, 0x1})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 4:
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:54 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x0, 0x84)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x1f, 0x1, 0x81, 0x7, 0x0, 0x1f, 0x80800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ca, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x20800, 0x81, 0xffff, 0x5, 0xffffffffffff0000, 0x8, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:54 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x1)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:54 executing program 4:
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:55 executing program 4:
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:55 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, &(0x7f00000005c0)=0xb0)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5e, 0x1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:55 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:55 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
r3 = msgget(0x2, 0x102)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
msgctl$IPC_RMID(r3, 0x0)
msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000040)=""/38)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000800)=[{0x53, 0x1, 0x4, 0x40, @tick=0x80000000, {0x40, 0x20}, {0x5, 0x2}, @connect={{0x6, 0x6}, {0x8, 0x6}}}, {0x4, 0xd, 0x3, 0x5, @time={0x4, 0x825e}, {0x5, 0x7}, {0x8, 0x4}, @raw8={"9953aa6642be6f1418ea08f8"}}, {0x3, 0x3, 0x8, 0x81, @time={0x5, 0x4}, {0x92, 0x4}, {0x0, 0x20}, @result={0x1b2, 0x8529}}, {0x81, 0x9, 0x1, 0x6, @time={0x2c6, 0x76f}, {0x3f}, {0x0, 0x3}, @raw8={"4d785a27e2fab161a28bc4d4"}}, {0x5e, 0x7f, 0x9, 0x5, @tick=0xad, {0x0, 0x8}, {0x1, 0xff}, @note={0x65, 0x0, 0x7, 0x20, 0x1}}], 0x8c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:55 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0xfffffef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x5}, 0x8)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:55 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:55 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'ip6gre0\x00', 0x100})
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
dup2(r5, 0xffffffffffffffff)
epoll_create(0x2)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:55 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x4000)

23:57:55 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:55 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
clock_gettime(0x6, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:55 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:55 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:56 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfa}, 0x1}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
connect$x25(r3, &(0x7f00000000c0)={0x9, @null='               \x00'}, 0x12)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:56 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:56 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:57:56 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000080)={0x5, 0x0, [], {0x0, @reserved}})

23:57:56 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  438.150129] net_ratelimit: 16 callbacks suppressed
[  438.150152] protocol 88fb is buggy, dev hsr_slave_0
[  438.162094] protocol 88fb is buggy, dev hsr_slave_1
23:57:56 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

[  438.252613] WARNING: kernel stack frame pointer at ffff8880aed077d0 in syz-executor.4:27379 has bad value 1ffff11015da0f06
[  438.252622] unwind stack type:0 next_sp:          (null) mask:0x6 graph_idx:0
[  438.252630] ffff8880aed077d0: 1ffff11015da0f06 (0x1ffff11015da0f06)
[  438.252703] ffff8880aed077d8: ffffffff85253dff (sk_filter_trim_cap+0x20f/0x7f0)
[  438.252708] ffff8880aed077e0: 0000000000000010 (0x10)
[  438.252713] ffff8880aed077e8: 0000000000000a06 (0xa06)
[  438.252718] ffff8880aed077f0: ffff8880aed07808 (0xffff8880aed07808)
[  438.252723] ffff8880aed077f8: ffff8880aed078b8 (0xffff8880aed078b8)
[  438.252729] ffff8880aed07800: ffffffff85253e45 (sk_filter_trim_cap+0x255/0x7f0)
[  438.252732] ffff8880aed07808: 0000000000000000 ...
[  438.252737] ffff8880aed07810: ffffc900018e6002 (0xffffc900018e6002)
[  438.252742] ffff8880aed07818: ffff8880957d0a98 (0xffff8880957d0a98)
[  438.252746] ffff8880aed07820: 00000001957d0a80 (0x1957d0a80)
[  438.252751] ffff8880aed07828: ffff8880a9951d00 (0xffff8880a9951d00)
[  438.252756] ffff8880aed07830: 0000000041b58ab3 (0x41b58ab3)
[  438.252815] ffff8880aed07838: ffffffff87ae388a (ORMASK+0xf84a/0x13eab0)
[  438.252822] ffff8880aed07840: ffffffff85253bf0 (sock_ops_is_valid_access+0x70/0x70)
[  438.252827] ffff8880aed07848: ffffed1012afa156 (0xffffed1012afa156)
[  438.252832] ffff8880aed07850: 1ffff11012afa155 (0x1ffff11012afa155)
[  438.252837] ffff8880aed07858: ffff8880511284c0 (0xffff8880511284c0)
[  438.252840] ffff8880aed07860: 0000000000000000 ...
[  438.252844] ffff8880aed07868: 0000000000000001 (0x1)
[  438.252849] ffff8880aed07870: ffff8880957d0a80 (0xffff8880957d0a80)
[  438.252854] ffff8880aed07878: ffff8880a12a92c0 (0xffff8880a12a92c0)
[  438.252859] ffff8880aed07880: ffffffffffffff10 (0xffffffffffffff10)
[  438.252865] ffff8880aed07888: ffffffff85253bf1 (sk_filter_trim_cap+0x1/0x7f0)
[  438.252869] ffff8880aed07890: 0000000000000008 (0x8)
[  438.252874] ffff8880aed07898: ffff8880957d0a80 (0xffff8880957d0a80)
[  438.252879] ffff8880aed078a0: ffff8880a12a92c0 (0xffff8880a12a92c0)
[  438.252884] ffff8880aed078a8: ffff8880957d0a80 (0xffff8880957d0a80)
[  438.252887] ffff8880aed078b0: 0000000000000000 ...
[  438.252892] ffff8880aed078b8: ffff8880aed078e0 (0xffff8880aed078e0)
[  438.252899] ffff8880aed078c0: ffffffff851947f5 (sock_queue_rcv_skb+0x25/0x50)
[  438.252904] ffff8880aed078c8: ffff8880957d0a80 (0xffff8880957d0a80)
[  438.252909] ffff8880aed078d0: ffff8880a15e8500 (0xffff8880a15e8500)
[  438.252914] ffff8880aed078d8: ffff8880a12a92c0 (0xffff8880a12a92c0)
[  438.252919] ffff8880aed078e0: ffff8880aed07920 (0xffff8880aed07920)
[  438.252973] ffff8880aed078e8: ffffffff85ac2e85 (packet_rcv_spkt+0x405/0x560)
[  438.252982] ffff8880aed078f0: ffffffff87f886a0 (rcu_bh_lock_map+0x40/0x40)
[  438.252991] ffff8880aed078f8: ffffffff88b46860 (inet_af_ops+0x60/0x60)
[  438.252997] ffff8880aed07900: ffffffff88b46860 (inet_af_ops+0x60/0x60)
[  438.253003] ffff8880aed07908: dffffc0000000000 (0xdffffc0000000000)
[  438.253009] ffff8880aed07910: ffffffff88b35cc0 (ptype_all+0x10/0x10)
[  438.253014] ffff8880aed07918: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253018] ffff8880aed07920: ffff8880aed07a70 (0xffff8880aed07a70)
[  438.253035] ffff8880aed07928: ffffffff851f5bf5 (__netif_receive_skb_core+0x9f5/0x2cb0)
[  438.253045] ffff8880aed07930: ffffffff81483ad0 (trace_hardirqs_on+0x10/0x10)
[  438.253048] ffff8880aed07938: 0000000000000000 ...
[  438.253052] ffff8880aed07940: ffff8880aed07998 (0xffff8880aed07998)
[  438.253061] ffff8880aed07948: ffffffff81004236 (trace_hardirqs_on_thunk+0x1a/0x1c)
[  438.253066] ffff8880aed07950: ffffed1012afa191 (0xffffed1012afa191)
[  438.253071] ffff8880aed07958: 1ffff11015da0f30 (0x1ffff11015da0f30)
[  438.253076] ffff8880aed07960: ffff8880957d0c8c (0xffff8880957d0c8c)
[  438.253081] ffff8880aed07968: 000000673c8b0000 (0x673c8b0000)
[  438.253085] ffff8880aed07970: ffff888000000008 (0xffff888000000008)
[  438.253090] ffff8880aed07978: ffff8880a15e8500 (0xffff8880a15e8500)
[  438.253095] ffff8880aed07980: 0000000041b58ab3 (0x41b58ab3)
[  438.253102] ffff8880aed07988: ffffffff87bd1aa0 (ORMASK+0xfda60/0x13eab0)
[  438.253108] ffff8880aed07990: ffffffff851f5200 (enqueue_to_backlog+0xd00/0xd00)
[  438.253113] ffff8880aed07998: ffff8880aed079a9 (0xffff8880aed079a9)
[  438.253121] ffff8880aed079a0: ffffffff86800979 (retint_kernel+0x2d/0x2d)
[  438.253125] ffff8880aed079a8: 0000000000000206 (0x206)
[  438.253130] ffff8880aed079b0: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253135] ffff8880aed079b8: 1ffffffff0fe2d2a (0x1ffffffff0fe2d2a)
[  438.253140] ffff8880aed079c0: dffffc0000000000 (0xdffffc0000000000)
[  438.253144] ffff8880aed079c8: ffff8880aed07ab0 (0xffff8880aed07ab0)
[  438.253149] ffff8880aed079d0: ffff88821fff7057 (0xffff88821fff7057)
[  438.253154] ffff8880aed079d8: ffff88821fff704f (0xffff88821fff704f)
[  438.253158] ffff8880aed079e0: ffffed1043ffee0b (0xffffed1043ffee0b)
[  438.253163] ffff8880aed079e8: ffff88821fff7058 (0xffff88821fff7058)
[  438.253168] ffff8880aed079f0: 1fffffff00000006 (0x1fffffff00000006)
[  438.253172] ffff8880aed079f8: ffff88821fff705b (0xffff88821fff705b)
[  438.253177] ffff8880aed07a00: 1ffffffff0fe2d28 (0x1ffffffff0fe2d28)
[  438.253182] ffff8880aed07a08: ffff8880511284c0 (0xffff8880511284c0)
[  438.253189] ffff8880aed07a10: ffffffff87f886a0 (rcu_bh_lock_map+0x40/0x40)
[  438.253191] ffff8880aed07a18: 0000000000000000 ...
[  438.253196] ffff8880aed07a28: 0000000000000002 (0x2)
[  438.253200] ffff8880aed07a30: ffff8880aed07aa8 (0xffff8880aed07aa8)
[  438.253207] ffff8880aed07a38: ffffffff81489d3f (lock_acquire+0x16f/0x430)
23:57:57 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0)
r2 = shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0)
shmdt(r2)
shmdt(r2)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r6 = dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

[  438.253212] ffff8880aed07a40: 1ffff11015da0f59 (0x1ffff11015da0f59)
[  438.253217] ffff8880aed07a48: ffff8880aed07a90 (0xffff8880aed07a90)
[  438.253222] ffff8880aed07a50: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253226] ffff8880aed07a58: ffff8880aed07b28 (0xffff8880aed07b28)
[  438.253232] ffff8880aed07a60: ffff8880957d0be0 (0xffff8880957d0be0)
[  438.253236] ffff8880aed07a68: ffff8880957d0c80 (0xffff8880957d0c80)
[  438.253242] ffff8880aed07a70: ffff8880aed07ab0 (0xffff8880aed07ab0)
[  438.253248] ffff8880aed07a78: ffffffff851f7edc (__netif_receive_skb+0x2c/0x1b0)
[  438.253254] ffff8880aed07a80: ffff8880aed07a90 (0xffff8880aed07a90)
[  438.253260] ffff8880aed07a88: ffffffff851f7edc (__netif_receive_skb+0x2c/0x1b0)
[  438.253266] ffff8880aed07a90: 1ffff11015da0f59 (0x1ffff11015da0f59)
[  438.253270] ffff8880aed07a98: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253274] ffff8880aed07aa0: ffff8880aed07b28 (0xffff8880aed07b28)
[  438.253278] ffff8880aed07aa8: ffff8880957d0be0 (0xffff8880957d0be0)
[  438.253283] ffff8880aed07ab0: ffff8880aed07b50 (0xffff8880aed07b50)
[  438.253289] ffff8880aed07ab8: ffffffff85201ac4 (netif_receive_skb_internal+0xe4/0x5a0)
[  438.253294] ffff8880aed07ac0: ffff88808311f0c0 (0xffff88808311f0c0)
[  438.253297] ffff8880aed07ac8: 0000000041b58ab3 (0x41b58ab3)
[  438.253302] ffff8880aed07ad0: ffffffff87bd1b70 (ORMASK+0xfdb30/0x13eab0)
[  438.253308] ffff8880aed07ad8: ffffffff852019e0 (dev_cpu_dead+0x8f0/0x8f0)
[  438.253313] ffff8880aed07ae0: ffff8880a15ec988 (0xffff8880a15ec988)
[  438.253319] ffff8880aed07ae8: ffffffff87f88620 (rcu_callback_map+0x40/0x40)
[  438.253323] ffff8880aed07af0: ffff8880511284c0 (0xffff8880511284c0)
[  438.253327] ffff8880aed07af8: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253332] ffff8880aed07b00: ffff8880957d0c80 (0xffff8880957d0c80)
[  438.253336] ffff8880aed07b08: 000e000800000000 (0xe000800000000)
[  438.253340] ffff8880aed07b10: ffff8880957d0bd0 (0xffff8880957d0bd0)
[  438.253377] ffff8880aed07b18: ffffffff814e39b2 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  438.253382] ffff8880aed07b20: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253387] ffff8880aed07b28: 0000000000000042 (0x42)
[  438.253392] ffff8880aed07b30: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253396] ffff8880aed07b38: 0000000000000003 (0x3)
[  438.253401] ffff8880aed07b40: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253406] ffff8880aed07b48: ffff8880957d0c80 (0xffff8880957d0c80)
[  438.253410] ffff8880aed07b50: ffff8880aed07b88 (0xffff8880aed07b88)
[  438.253417] ffff8880aed07b58: ffffffff852056e8 (napi_gro_receive+0x2f8/0x410)
[  438.253420] ffff8880aed07b60: 0000000000000000 ...
[  438.253424] ffff8880aed07b68: 0000000000000042 (0x42)
[  438.253428] ffff8880aed07b70: ffff8880957d0c40 (0xffff8880957d0c40)
[  438.253432] ffff8880aed07b78: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253435] ffff8880aed07b80: ffff8880957d0c80 (0xffff8880957d0c80)
[  438.253439] ffff8880aed07b88: ffff8880aed07d30 (0xffff8880aed07d30)
[  438.253478] ffff8880aed07b90: ffffffff83f3ffc4 (receive_buf+0x534/0x4770)
[  438.253514] ffff8880aed07b98: ffffffff8128e229 (kvm_sched_clock_read+0x9/0x20)
[  438.253517] ffff8880aed07ba0: 0000000000000000 ...
[  438.253521] ffff8880aed07ba8: ffff888051128d40 (0xffff888051128d40)
[  438.253525] ffff8880aed07bb0: 0000000000000002 (0x2)
[  438.253528] ffff8880aed07bb8: ffff8880511284c0 (0xffff8880511284c0)
[  438.253532] ffff8880aed07bc0: ffff8880aed07c48 (0xffff8880aed07c48)
[  438.253535] ffff8880aed07bc8: 0000000000000600 (0x600)
[  438.253539] ffff8880aed07bd0: ffffffff00006600 (0xffffffff00006600)
[  438.253543] ffff8880aed07bd8: ffff8880aed07c38 (0xffff8880aed07c38)
[  438.253547] ffff8880aed07be0: 0000000000000042 (0x42)
[  438.253551] ffff8880aed07be8: ffff8880957d0bc0 (0xffff8880957d0bc0)
[  438.253556] ffff8880aed07bf0: 1ffff11015da0f81 (0x1ffff11015da0f81)
[  438.253560] ffff8880aed07bf8: ffff8880a15e8500 (0xffff8880a15e8500)
[  438.253563] ffff8880aed07c00: ffff8880a15ec948 (0xffff8880a15ec948)
[  438.253567] ffff8880aed07c08: 0000000041b58ab3 (0x41b58ab3)
[  438.253572] ffff8880aed07c10: ffffffff87b8b230 (ORMASK+0xb71f0/0x13eab0)
[  438.253579] ffff8880aed07c18: ffffffff83f3fa90 (virtnet_xdp_xmit.isra.0+0x760/0x760)
[  438.253631] ffff8880aed07c20: ffffffff8344cb2b (vring_unmap_one+0x4b/0x3f0)
[  438.253634] ffff8880aed07c28: 0000000000000000 ...
[  438.253639] ffff8880aed07c30: ffff8880a17000c0 (0xffff8880a17000c0)
[  438.253644] ffff8880aed07c38: ffff88800000004e (0xffff88800000004e)
[  438.253649] ffff8880aed07c40: ffff8880a17000c0 (0xffff8880a17000c0)
[  438.253652] ffff8880aed07c48: 0000000000000600 (0x600)
[  438.253657] ffff8880aed07c50: ffff8880aed07cd0 (0xffff8880aed07cd0)
[  438.253664] ffff8880aed07c58: ffffffff8344d2d8 (detach_buf+0x408/0x590)
[  438.253668] ffff8880aed07c60: 000005f8aed07c98 (0x5f8aed07c98)
[  438.253673] ffff8880aed07c68: ffff8880a17000ec (0xffff8880a17000ec)
[  438.253678] ffff8880aed07c70: ffff8880a1706040 (0xffff8880a1706040)
[  438.253682] ffff8880aed07c78: ffff8880aed07dc0 (0xffff8880aed07dc0)
[  438.253687] ffff8880aed07c80: 00000000000005f8 (0x5f8)
[  438.253691] ffff8880aed07c88: ffff8880a1700100 (0xffff8880a1700100)
[  438.253696] ffff8880aed07c90: 0000000000005f80 (0x5f80)
[  438.253700] ffff8880aed07c98: 0000000000000001 (0x1)
[  438.253704] ffff8880aed07ca0: 0000000000000001 (0x1)
[  438.253709] ffff8880aed07ca8: 0000000000005f80 (0x5f80)
[  438.253713] ffff8880aed07cb0: ffff8880a1700124 (0xffff8880a1700124)
[  438.253718] ffff8880aed07cb8: ffff8880a17000c0 (0xffff8880a17000c0)
[  438.253723] ffff8880aed07cc0: ffff8880a1700119 (0xffff8880a1700119)
[  438.253727] ffff8880aed07cc8: ffff88821931e600 (0xffff88821931e600)
[  438.253731] ffff8880aed07cd0: ffff8880aed07d30 (0xffff8880aed07d30)
[  438.253738] ffff8880aed07cd8: ffffffff8344d790 (virtqueue_get_buf_ctx+0x330/0x6c0)
[  438.253741] ffff8880aed07ce0: 0000000000000000 ...
[  438.253745] ffff8880aed07ce8: ffff8880a1700118 (0xffff8880a1700118)
[  438.253750] ffff8880aed07cf0: ffff8880a17000f8 (0xffff8880a17000f8)
[  438.253755] ffff8880aed07cf8: ffff8880000005f8 (0xffff8880000005f8)
[  438.253760] ffff8880aed07d00: ffff8880aed07dc0 (0xffff8880aed07dc0)
[  438.253765] ffff8880aed07d08: ffff8880a15e8fc0 (0xffff8880a15e8fc0)
[  438.253767] ffff8880aed07d10: 0000000000000000 ...
[  438.253772] ffff8880aed07d18: ffff8880aed07de0 (0xffff8880aed07de0)
[  438.253775] ffff8880aed07d20: 0000000000000001 (0x1)
[  438.253780] ffff8880aed07d28: ffffe8ffffd39f50 (0xffffe8ffffd39f50)
[  438.253784] ffff8880aed07d30: ffff8880aed07e08 (0xffff8880aed07e08)
[  438.253790] ffff8880aed07d38: ffffffff83f44715 (virtnet_poll+0x515/0xa6e)
[  438.253794] ffff8880aed07d40: ffff8880aed07dc0 (0xffff8880aed07dc0)
[  438.253798] ffff8880aed07d48: ffffed10142bd929 (0xffffed10142bd929)
[  438.253802] ffff8880aed07d50: ffff88821931e600 (0xffff88821931e600)
23:57:57 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000680))
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x81402049}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x30c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, [{0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbfd}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6149}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a3}]}, {0x4c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf029}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x426cc1ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10cd36fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x163f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39faed1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe13b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, [{0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d6e057c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e0f3918}]}, {0x44, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb36a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8658}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x278c4b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe698}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e2eeba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ee4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf645}]}, {0x34, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7757eddf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x509db57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ed7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640b9388}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68b5ce7e}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x476dd56c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78b17685}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c3abae}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75a2c879}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437fffaf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x332b}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb86d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22d22548}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, [{0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x24, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f1b721}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9421460}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x54, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3848e860}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f146bcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c534fd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f19bac5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70725aeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd6c5cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x346e10f6}]}, {0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x54, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c15049}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b27ab96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34641e3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f090744}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670ef344}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x685984eb}]}, {0x54, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdd47fd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a7803ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74e57499}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4def6ef8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x485ca405}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540a80db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27e1d9ad}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x30c}, 0x1, 0x0, 0x0, 0x20004010}, 0x8020)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x1, 0x6, 0x400, 0x70bd29, 0x25dfdbfb, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008805)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  438.253806] ffff8880aed07d58: 1ffff11015da0fb0 (0x1ffff11015da0fb0)
[  438.253810] ffff8880aed07d60: ffff8880aed07db0 (0xffff8880aed07db0)
[  438.253814] ffff8880aed07d68: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253818] ffff8880aed07d70: 0000004051128d40 (0x4051128d40)
[  438.253823] ffff8880aed07d78: ffff8880a15ec948 (0xffff8880a15ec948)
[  438.253827] ffff8880aed07d80: 0000000041b58ab3 (0x41b58ab3)
[  438.253832] ffff8880aed07d88: ffffffff87b8b288 (ORMASK+0xb7248/0x13eab0)
[  438.253839] ffff8880aed07d90: ffffffff83f44200 (receive_buf+0x4770/0x4770)
[  438.253847] ffff8880aed07d98: ffffffff814834e1 (mark_held_locks+0xb1/0x100)
[  438.253853] ffff8880aed07da0: ffffffff814834e1 (mark_held_locks+0xb1/0x100)
[  438.253858] ffff8880aed07da8: 00000003aed1f140 (0x3aed1f140)
[  438.253863] ffff8880aed07db0: ffff88800000004e (0xffff88800000004e)
[  438.253869] ffff8880aed07db8: ffffffff85202f2a (net_rx_action+0x25a/0xf80)
[  438.253874] ffff8880aed07dc0: 0000000000000600 (0x600)
[  438.253878] ffff8880aed07dc8: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253883] ffff8880aed07dd0: dffffc0000000000 (0xdffffc0000000000)
[  438.253887] ffff8880aed07dd8: ffff8880aed07df8 (0xffff8880aed07df8)
[  438.253890] ffff8880aed07de0: 0000000000000000 ...
[  438.253894] ffff8880aed07de8: ffff8880a15ec950 (0xffff8880a15ec950)
[  438.253898] ffff8880aed07df0: 0000000000000040 (0x40)
[  438.253901] ffff8880aed07df8: 0000000000000000 ...
[  438.253906] ffff8880aed07e00: dffffc0000000000 (0xdffffc0000000000)
[  438.253910] ffff8880aed07e08: ffff8880aed07f00 (0xffff8880aed07f00)
[  438.253917] ffff8880aed07e10: ffffffff85203160 (net_rx_action+0x490/0xf80)
[  438.253921] ffff8880aed07e18: ffff88821fff7050 (0xffff88821fff7050)
[  438.253927] ffff8880aed07e20: fffffbfff1160bb1 (0xfffffbfff1160bb1)
[  438.253931] ffff8880aed07e28: 1ffff11015da0fcf (0x1ffff11015da0fcf)
[  438.253936] ffff8880aed07e30: ffff8880aed07eb8 (0xffff8880aed07eb8)
[  438.253941] ffff8880aed07e38: 1ffffffff0f831ad (0x1ffffffff0f831ad)
[  438.253946] ffff8880aed07e40: ffff8880a15ec980 (0xffff8880a15ec980)
[  438.253950] ffff8880aed07e48: ffff8880a15ec960 (0xffff8880a15ec960)
[  438.253955] ffff8880aed07e50: 0000000100003603 (0x100003603)
[  438.253960] ffff8880aed07e58: 0000012c00000000 (0x12c00000000)
[  438.253965] ffff8880aed07e60: ffff8880aed07e98 (0xffff8880aed07e98)
[  438.253970] ffff8880aed07e68: ffff8880a15ec958 (0xffff8880a15ec958)
[  438.253974] ffff8880aed07e70: ffff8880aed2c680 (0xffff8880aed2c680)
[  438.253979] ffff8880aed07e78: 0000000041b58ab3 (0x41b58ab3)
[  438.253985] ffff8880aed07e80: ffffffff87bd1ba0 (ORMASK+0xfdb60/0x13eab0)
[  438.253991] ffff8880aed07e88: ffffffff85202cd0 (napi_complete_done+0x4f0/0x4f0)
[  438.253995] ffff8880aed07e90: 0000000000000286 (0x286)
[  438.254000] ffff8880aed07e98: ffff8880aed07e98 (0xffff8880aed07e98)
[  438.254004] ffff8880aed07ea0: ffff8880aed07e98 (0xffff8880aed07e98)
[  438.254009] ffff8880aed07ea8: 0000000000000003 (0x3)
[  438.254013] ffff8880aed07eb0: dffffc0000000000 (0xdffffc0000000000)
[  438.254018] ffff8880aed07eb8: ffff8880aed07eb8 (0xffff8880aed07eb8)
[  438.254022] ffff8880aed07ec0: ffff8880aed07eb8 (0xffff8880aed07eb8)
[  438.254030] ffff8880aed07ec8: ffffffff814e39b2 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  438.254034] ffff8880aed07ed0: 0000000000000003 (0x3)
[  438.254064] ffff8880aed07ed8: ffffffff87e09118 (softirq_vec+0x18/0x80)
[  438.254068] ffff8880aed07ee0: 0000000000000004 (0x4)
[  438.254072] ffff8880aed07ee8: 0000000000000003 (0x3)
[  438.254076] ffff8880aed07ef0: 0000000000000003 (0x3)
[  438.254081] ffff8880aed07ef8: dffffc0000000000 (0xdffffc0000000000)
[  438.254085] ffff8880aed07f00: ffff8880aed07f98 (0xffff8880aed07f98)
[  438.254114] ffff8880aed07f08: ffffffff86a00244 (__do_softirq+0x244/0x9a0)
[  438.254131] ffff8880aed07f10: ffffffff81218cce (sched_clock+0x2e/0x50)
[  438.254136] ffff8880aed07f18: 01ff888000404140 (0x1ff888000404140)
[  438.254141] ffff8880aed07f20: ffffed100a225098 (0xffffed100a225098)
[  438.254145] ffff8880aed07f28: ffff8880511284c0 (0xffff8880511284c0)
[  438.254150] ffff8880aed07f30: 0000000100003603 (0x100003603)
[  438.254154] ffff8880aed07f38: 0000000000000008 (0x8)
[  438.254158] ffff8880aed07f40: 0000000000000003 (0x3)
[  438.254162] ffff8880aed07f48: 0000000000000003 (0x3)
[  438.254167] ffff8880aed07f50: 0000000000000020 (0x20)
[  438.254171] ffff8880aed07f58: 000001000000000a (0x1000000000a)
[  438.254178] ffff8880aed07f60: ffffffff87e09100 (tasklist_lock+0x40/0x40)
[  438.254182] ffff8880aed07f68: 0000000800000004 (0x800000004)
[  438.254187] ffff8880aed07f70: ffff8880a15ef200 (0xffff8880a15ef200)
[  438.254192] ffff8880aed07f78: ffff888211c57868 (0xffff888211c57868)
[  438.254196] ffff8880aed07f80: 00000000000000e1 (0xe1)
[  438.254200] ffff8880aed07f88: 00000000000000e1 (0xe1)
[  438.254203] ffff8880aed07f90: 0000000000000000 ...
[  438.254207] ffff8880aed07f98: ffff8880aed07fb0 (0xffff8880aed07fb0)
[  438.254216] ffff8880aed07fa0: ffffffff81392c20 (irq_exit+0x160/0x1b0)
[  438.254220] ffff8880aed07fa8: ffff8880a15ef200 (0xffff8880a15ef200)
[  438.254225] ffff8880aed07fb0: ffff8880aed07fe8 (0xffff8880aed07fe8)
[  438.254231] ffff8880aed07fb8: ffffffff8680226b (do_IRQ+0x11b/0x1d0)
[  438.254234] ffff8880aed07fc0: 0000000000000000 ...
[  438.254238] ffff8880aed07fe8: ffff888211c57869 (0xffff888211c57869)
[  438.254244] ffff8880aed07ff0: ffffffff868008d6 (common_interrupt+0x96/0x96)
[  438.254249] ffff8880aed07ff8: ffff888211c57868 (0xffff888211c57868)
[  438.254255] ffff888211c57868: ffff8880511284c0 (0xffff8880511284c0)
[  438.254259] ffff888211c57870: 0000000000716058 (0x716058)
[  438.254265] ffff888211c57878: ffff888211c57a08 (0xffff888211c57a08)
[  438.254269] ffff888211c57880: 0000000000000003 (0x3)
[  438.254273] ffff888211c57888: ffff888211c579c0 (0xffff888211c579c0)
[  438.254278] ffff888211c57890: ffff888052011980 (0xffff888052011980)
[  438.254281] ffff888211c57898: 0000000000000000 ...
[  438.254285] ffff888211c578a8: ffff888051128d60 (0xffff888051128d60)
[  438.254288] ffff888211c578b0: 0000000000000000 ...
[  438.254293] ffff888211c578b8: 0000000000040000 (0x40000)
[  438.254298] ffff888211c578c0: ffffc90012ab4000 (0xffffc90012ab4000)
[  438.254301] ffff888211c578c8: 00000000000003e5 (0x3e5)
[  438.254329] ffff888211c578d0: ffffffff8129e52a (__do_page_fault+0x63a/0xb80)
[  438.254334] ffff888211c578d8: ffff888051128d3c (0xffff888051128d3c)
[  438.254339] ffff888211c578e0: ffffffffffffff1e (0xffffffffffffff1e)
[  438.254344] ffff888211c578e8: ffffffff8129e531 (__do_page_fault+0x641/0xb80)
[  438.254348] ffff888211c578f0: 0000000000000010 (0x10)
[  438.254352] ffff888211c578f8: 0000000000000216 (0x216)
[  438.254357] ffff888211c57900: ffff888211c57918 (0xffff888211c57918)
[  438.254361] ffff888211c57908: 0000000000000018 (0x18)
[  438.254367] ffff888211c57910: ffffffff8129e52a (__do_page_fault+0x63a/0xb80)
[  438.254372] ffff888211c57918: ffff888051128d40 (0xffff888051128d40)
[  438.254377] ffff888211c57920: 0000000041b58ab3 (0x41b58ab3)
[  438.254382] ffff888211c57928: ffffffff87ad9044 (ORMASK+0x5004/0x13eab0)
[  438.254387] ffff888211c57930: 0000000041b58ab3 (0x41b58ab3)
[  438.254392] ffff888211c57938: ffff888052011a30 (0xffff888052011a30)
[  438.254396] ffff888211c57940: 0000001400000000 (0x1400000000)
[  438.254401] ffff888211c57948: 1ffff1104238af2b (0x1ffff1104238af2b)
[  438.254406] ffff888211c57950: ffff8880511284c0 (0xffff8880511284c0)
[  438.254410] ffff888211c57958: 0000000041b58ab3 (0x41b58ab3)
[  438.254417] ffff888211c57960: ffffffff87ad1c2d (inat_primary_table+0x3b5a4d/0x3b6f50)
[  438.254423] ffff888211c57968: ffffffff8129def0 (vmalloc_fault+0xe30/0xe30)
[  438.254426] ffff888211c57970: 0000000000000002 (0x2)
[  438.254430] ffff888211c57978: 0000000000000086 (0x86)
[  438.254433] ffff888211c57980: 0000000000000000 ...
[  438.254438] ffff888211c579a0: ffff888211c57a08 (0xffff888211c57a08)
[  438.254442] ffff888211c579a8: 0000000000000003 (0x3)
[  438.254446] ffff888211c579b0: 0000000000716058 (0x716058)
[  438.254454] ffff888211c579b8: 0000000000000000 ...
[  438.254459] ffff888211c579c0: ffff888211c579f8 (0xffff888211c579f8)
[  438.254465] ffff888211c579c8: ffffffff8129eb11 (do_page_fault+0x71/0x511)
[  438.254468] ffff888211c579d0: 0000000000000000 ...
[  438.254473] ffff888211c579f8: ffff888211c57a09 (0xffff888211c57a09)
[  438.254479] ffff888211c57a00: ffffffff868014d5 (page_fault+0x25/0x50)
[  438.254483] ffff888211c57a08: 0000000000716080 (0x716080)
[  438.254488] ffff888211c57a10: 00007ffffffff000 (0x7ffffffff000)
[  438.254492] ffff888211c57a18: ffff888211c57b40 (0xffff888211c57b40)
[  438.254496] ffff888211c57a20: 0000000000716058 (0x716058)
[  438.254501] ffff888211c57a28: ffff888211c57ae0 (0xffff888211c57ae0)
[  438.254505] ffff888211c57a30: 0000000000000028 (0x28)
[  438.254510] ffff888211c57a38: ffff888211c57b67 (0xffff888211c57b67)
[  438.254515] ffff888211c57a40: ffffed104238af6c (0xffffed104238af6c)
[  438.254520] ffff888211c57a48: ffffed104238af6d (0xffffed104238af6d)
[  438.254524] ffff888211c57a50: 0000000000006f6c (0x6f6c)
[  438.254529] ffff888211c57a58: ffffed104238af6d (0xffffed104238af6d)
[  438.254533] ffff888211c57a60: 0000000000000005 (0x5)
[  438.254536] ffff888211c57a68: 0000000000000000 ...
[  438.254541] ffff888211c57a70: ffff888211c57b40 (0xffff888211c57b40)
[  438.254545] ffff888211c57a78: 0000000000716058 (0x716058)
[  438.254550] ffff888211c57a80: ffffffffffffffff (0xffffffffffffffff)
[  438.254558] ffff888211c57a88: ffffffff86671fb9 (copy_user_generic_unrolled+0x89/0xc0)
[  438.254562] ffff888211c57a90: 0000000000000010 (0x10)
[  438.254566] ffff888211c57a98: 0000000000010206 (0x10206)
[  438.254570] ffff888211c57aa0: ffff888211c57ab0 (0xffff888211c57ab0)
[  438.254574] ffff888211c57aa8: 0000000000000018 (0x18)
[  438.254582] ffff888211c57ab0: ffffffff830dc431 (_copy_to_user+0xb1/0xd0)
[  438.254587] ffff888211c57ab8: ffff88808de00540 (0xffff88808de00540)
[  438.254591] ffff888211c57ac0: 0000000000716058 (0x716058)
[  438.254603] ffff888211c57ac8: ffff888211c57b40 (0xffff888211c57b40)
[  438.254606] ffff888211c57ad0: 0000000000000000 ...
[  438.254611] ffff888211c57ad8: dffffc0000000000 (0xdffffc0000000000)
[  438.254615] ffff888211c57ae0: ffff888211c57bc0 (0xffff888211c57bc0)
[  438.254651] ffff888211c57ae8: ffffffff857a1052 (inet_gifconf+0x1c2/0x2f0)
[  438.254657] ffff888211c57af0: 1ffff1104238af62 (0x1ffff1104238af62)
[  438.254661] ffff888211c57af8: 004b00b041b58ab3 (0x4b00b041b58ab3)
[  438.254665] ffff888211c57b00: 0000000000716058 (0x716058)
[  438.254670] ffff888211c57b08: ffff88808de00588 (0xffff88808de00588)
[  438.254674] ffff888211c57b10: 0000000041b58ab3 (0x41b58ab3)
[  438.254681] ffff888211c57b18: ffffffff87be4da3 (ORMASK+0x110d63/0x13eab0)
[  438.254688] ffff888211c57b20: ffffffff857a0e90 (inet_netconf_get_devconf+0x4b0/0x4b0)
[  438.254690] ffff888211c57b28: 0000000000000000 ...
[  438.254695] ffff888211c57b30: ffff8880511284c0 (0xffff8880511284c0)
[  438.254699] ffff888211c57b38: ffff8880511284c0 (0xffff8880511284c0)
[  438.254703] ffff888211c57b40: 0000000000006f6c (0x6f6c)
[  438.254705] ffff888211c57b48: 0000000000000000 ...
[  438.254710] ffff888211c57b50: 0100007f00000002 (0x100007f00000002)
[  438.254712] ffff888211c57b58: 0000000000000000 ...
[  438.254716] ffff888211c57b68: 0000000000000010 (0x10)
[  438.254721] ffff888211c57b70: ffff888211c57c20 (0xffff888211c57c20)
[  438.254725] ffff888211c57b78: ffff888211c57b88 (0xffff888211c57b88)
[  438.254733] ffff888211c57b80: ffffffff8187c944 (kasan_check_write+0x14/0x20)
[  438.254738] ffff888211c57b88: ffff888211c57bc0 (0xffff888211c57bc0)
[  438.254745] ffff888211c57b90: ffffffff830dc309 (_copy_from_user+0x99/0x110)
[  438.254750] ffff888211c57b98: 1ffff1104238af7e (0x1ffff1104238af7e)
[  438.254758] ffff888211c57ba0: ffffffff857a0e90 (inet_netconf_get_devconf+0x4b0/0x4b0)
[  438.254765] ffff888211c57ba8: ffffffff8a5397b0 (gifconf_list+0x10/0x180)
[  438.254770] ffff888211c57bb0: 0000000000400200 (0x400200)
[  438.254773] ffff888211c57bb8: 0000000000000000 ...
[  438.254778] ffff888211c57bc0: ffff888211c57d00 (0xffff888211c57d00)
[  438.254785] ffff888211c57bc8: ffffffff85265204 (dev_ioctl+0x324/0xcb0)
[  438.254789] ffff888211c57bd0: ffff88807ecac638 (0xffff88807ecac638)
[  438.254793] ffff888211c57bd8: 00000000004b00b0 (0x4b00b0)
[  438.254798] ffff888211c57be0: ffff88809b29a480 (0xffff88809b29a480)
[  438.254803] ffff888211c57be8: 0000000000716058 (0x716058)
[  438.254807] ffff888211c57bf0: 0000000041b58ab3 (0x41b58ab3)
[  438.254814] ffff888211c57bf8: ffffffff87bd3248 (ORMASK+0xff208/0x13eab0)
[  438.254821] ffff888211c57c00: ffffffff85264ee0 (dev_load+0x1b0/0x1b0)
[  438.254830] ffff888211c57c08: ffffffff81004236 (trace_hardirqs_on_thunk+0x1a/0x1c)
[  438.254834] ffff888211c57c10: 0000000000000001 (0x1)
[  438.254838] ffff888211c57c18: ffff88821fff7050 (0xffff88821fff7050)
[  438.254843] ffff888211c57c20: 00000000004b00b0 (0x4b00b0)
[  438.254847] ffff888211c57c28: 0000000000716058 (0x716058)
[  438.254852] ffff888211c57c30: ffff888211c57c68 (0xffff888211c57c68)
[  438.254858] ffff888211c57c38: 1ffffffff0f831ad (0x1ffffffff0f831ad)
[  438.254861] ffff888211c57c40: 0000000000000000 ...
[  438.254868] ffff888211c57c48: ffffffff830ea93c (check_preemption_disabled+0x3c/0x250)
[  438.254874] ffff888211c57c50: ffff888051128d0c (0xffff888051128d0c)
[  438.254879] ffff888211c57c58: ffff888211c57c69 (0xffff888211c57c69)
[  438.254886] ffff888211c57c60: ffffffff86800979 (retint_kernel+0x2d/0x2d)
[  438.254891] ffff888211c57c68: ffff8880943ce680 (0xffff8880943ce680)
[  438.254896] ffff888211c57c70: ffff88807ecac4c0 (0xffff88807ecac4c0)
[  438.254901] ffff888211c57c78: 0000000000400200 (0x400200)
[  438.254905] ffff888211c57c80: 0000000000008912 (0x8912)
[  438.254910] ffff888211c57c88: ffff888211c57d40 (0xffff888211c57d40)
[  438.254915] ffff888211c57c90: 00000000fffffdfd (0xfffffdfd)
[  438.254919] ffff888211c57c98: 0000000000000003 (0x3)
[  438.254924] ffff888211c57ca0: ffff888211c57e78 (0xffff888211c57e78)
[  438.254927] ffff888211c57ca8: 0000000000000000 ...
[  438.254931] ffff888211c57cb0: ffff8880511284c0 (0xffff8880511284c0)
[  438.254936] ffff888211c57cb8: 0000000000040000 (0x40000)
[  438.254940] ffff888211c57cc0: ffffc90012ab4000 (0xffffc90012ab4000)
[  438.254945] ffff888211c57cc8: 0000000000400200 (0x400200)
[  438.254949] ffff888211c57cd0: 00000000fffffdfd (0xfffffdfd)
[  438.254953] ffff888211c57cd8: ffff888211c57d18 (0xffff888211c57d18)
[  438.254957] ffff888211c57ce0: 0000000000008912 (0x8912)
[  438.254961] ffff888211c57ce8: 0000000000400200 (0x400200)
[  438.254965] ffff888211c57cf0: ffff88807ecac4c0 (0xffff88807ecac4c0)
[  438.254970] ffff888211c57cf8: ffff8880943ce680 (0xffff8880943ce680)
[  438.254974] ffff888211c57d00: ffff888211c57d40 (0xffff888211c57d40)
[  438.254982] ffff888211c57d08: ffffffff8517e193 (sock_do_ioctl+0x93/0xb0)
[  438.254989] ffff888211c57d10: ffffffff8517e193 (sock_do_ioctl+0x93/0xb0)
[  438.254993] ffff888211c57d18: ffff88808d8ecac0 (0xffff88808d8ecac0)
[  438.254998] ffff888211c57d20: 0000000000008912 (0x8912)
[  438.255003] ffff888211c57d28: ffff8880943ce680 (0xffff8880943ce680)
[  438.255007] ffff888211c57d30: 0000000000400200 (0x400200)
[  438.255011] ffff888211c57d38: ffff88807ecac4c0 (0xffff88807ecac4c0)
[  438.255016] ffff888211c57d40: ffff888211c57d80 (0xffff888211c57d80)
[  438.255022] ffff888211c57d48: ffffffff8517ebb6 (sock_ioctl+0x2a6/0x470)
[  438.255027] ffff888211c57d50: 0000000000008912 (0x8912)
[  438.255031] ffff888211c57d58: 0000000000008912 (0x8912)
[  438.255035] ffff888211c57d60: 1ffff1104238afb8 (0x1ffff1104238afb8)
[  438.255039] ffff888211c57d68: ffff888055664000 (0xffff888055664000)
[  438.255046] ffff888211c57d70: ffffffff8517e910 (dlci_ioctl_set+0x40/0x40)
[  438.255050] ffff888211c57d78: 0000000000400200 (0x400200)
[  438.255054] ffff888211c57d80: ffff888211c57ea8 (0xffff888211c57ea8)
[  438.255063] ffff888211c57d88: ffffffff8193ea3e (do_vfs_ioctl+0x7ae/0x1060)
[  438.255066] ffff888211c57d90: 0000000000000000 ...
[  438.255071] ffff888211c57da0: ffff888211c57df8 (0xffff888211c57df8)
[  438.255078] ffff888211c57da8: ffffffff81004236 (trace_hardirqs_on_thunk+0x1a/0x1c)
[  438.255082] ffff888211c57db0: 0000000000000001 (0x1)
[  438.255087] ffff888211c57db8: ffff888200000007 (0xffff888200000007)
[  438.255091] ffff888211c57dc0: 0000000041b58ab3 (0x41b58ab3)
[  438.255097] ffff888211c57dc8: ffffffff87aed4c0 (ORMASK+0x19480/0x13eab0)
[  438.255104] ffff888211c57dd0: ffffffff8193e290 (ioctl_preallocate+0x1c0/0x1c0)
[  438.255109] ffff888211c57dd8: 1ffffffff0f831ad (0x1ffffffff0f831ad)
[  438.255111] ffff888211c57de0: 0000000000000000 ...
[  438.255118] ffff888211c57de8: ffffffff830ea93c (check_preemption_disabled+0x3c/0x250)
[  438.255123] ffff888211c57df0: ffff888051128d0c (0xffff888051128d0c)
[  438.255127] ffff888211c57df8: ffff888211c57e09 (0xffff888211c57e09)
[  438.255133] ffff888211c57e00: ffffffff86800979 (retint_kernel+0x2d/0x2d)
[  438.255138] ffff888211c57e08: ffff888055664000 (0xffff888055664000)
[  438.255142] ffff888211c57e10: 0000000000400200 (0x400200)
[  438.255146] ffff888211c57e18: 0000000000000007 (0x7)
[  438.255150] ffff888211c57e20: ffff888055664001 (0xffff888055664001)
[  438.255155] ffff888211c57e28: ffff888211c57ee8 (0xffff888211c57ee8)
[  438.255159] ffff888211c57e30: 0000000000008912 (0x8912)
[  438.255163] ffff888211c57e38: 0000000000000003 (0x3)
[  438.255168] ffff888211c57e40: ffff888211c57e78 (0xffff888211c57e78)
[  438.255170] ffff888211c57e48: 0000000000000000 ...
[  438.255175] ffff888211c57e50: ffff8880511284c0 (0xffff8880511284c0)
[  438.255177] ffff888211c57e58: 0000000000000000 ...
[  438.255182] ffff888211c57e60: ffffc90012ab4000 (0xffffc90012ab4000)
[  438.255186] ffff888211c57e68: 000000000000030f (0x30f)
[  438.255195] ffff888211c57e70: ffffffff82d1be49 (security_file_ioctl+0x89/0xb0)
[  438.255199] ffff888211c57e78: 0000000000000286 (0x286)
[  438.255201] ffff888211c57e80: 0000000000000000 ...
[  438.255206] ffff888211c57e88: ffff888055664001 (0xffff888055664001)
[  438.255210] ffff888211c57e90: 0000000000000007 (0x7)
[  438.255214] ffff888211c57e98: 0000000000400200 (0x400200)
[  438.255219] ffff888211c57ea0: ffff888055664000 (0xffff888055664000)
[  438.255224] ffff888211c57ea8: ffff888211c57ee8 (0xffff888211c57ee8)
[  438.255230] ffff888211c57eb0: ffffffff8193f37f (SyS_ioctl+0x8f/0xc0)
[  438.255235] ffff888211c57eb8: 0000000000008912 (0x8912)
[  438.255242] ffff888211c57ec0: ffffffff8193f2f0 (do_vfs_ioctl+0x1060/0x1060)
[  438.255246] ffff888211c57ec8: ffff888211c57f58 (0xffff888211c57f58)
[  438.255255] ffff888211c57ed0: ffffffff87f16958 (pv_irq_ops+0x18/0x30)
[  438.255260] ffff888211c57ed8: ffff888211c57fd0 (0xffff888211c57fd0)
[  438.255264] ffff888211c57ee0: ffff8880511284c0 (0xffff8880511284c0)
[  438.255269] ffff888211c57ee8: ffff888211c57f48 (0xffff888211c57f48)
[  438.255276] ffff888211c57ef0: ffffffff81007778 (do_syscall_64+0x1e8/0x640)
[  438.255283] ffff888211c57ef8: ffffffff81004252 (trace_hardirqs_off_thunk+0x1a/0x1c)
[  438.255285] ffff888211c57f00: 0000000000000000 ...
[  438.255292] ffff888211c57f50: ffffffff86800086 (entry_SYSCALL_64_after_hwframe+0x42/0xb7)
[  438.255296] ffff888211c57f58: 00000000ffffffff (0xffffffff)
[  438.255301] ffff888211c57f60: 00000000004dba00 (0x4dba00)
[  438.255305] ffff888211c57f68: 00000000004c4f66 (0x4c4f66)
[  438.255310] ffff888211c57f70: 00007fb59ba6f6d4 (0x7fb59ba6f6d4)
[  438.255315] ffff888211c57f78: 000000000075bf20 (0x75bf20)
[  438.255319] ffff888211c57f80: 0000000000000003 (0x3)
[  438.255323] ffff888211c57f88: 0000000000000246 (0x246)
[  438.255326] ffff888211c57f90: 0000000000000000 ...
[  438.255331] ffff888211c57fa8: ffffffffffffffda (0xffffffffffffffda)
[  438.255335] ffff888211c57fb0: 000000000045af49 (0x45af49)
[  438.255339] ffff888211c57fb8: 0000000000400200 (0x400200)
[  438.255343] ffff888211c57fc0: 0000000000008912 (0x8912)
[  438.255347] ffff888211c57fc8: 0000000000000007 (0x7)
[  438.255351] ffff888211c57fd0: 0000000000000010 (0x10)
[  438.255356] ffff888211c57fd8: 000000000045af49 (0x45af49)
[  438.255360] ffff888211c57fe0: 0000000000000033 (0x33)
[  438.255364] ffff888211c57fe8: 0000000000000246 (0x246)
[  438.255369] ffff888211c57ff0: 00007fb59ba6ec78 (0x7fb59ba6ec78)
[  438.255374] ffff888211c57ff8: 000000000000002b (0x2b)
[  441.380321] protocol 88fb is buggy, dev hsr_slave_0
[  441.385452] protocol 88fb is buggy, dev hsr_slave_1
[  441.390645] protocol 88fb is buggy, dev hsr_slave_0
[  441.395720] protocol 88fb is buggy, dev hsr_slave_1
[  441.400908] protocol 88fb is buggy, dev hsr_slave_0
[  441.405985] protocol 88fb is buggy, dev hsr_slave_1
[  441.411157] protocol 88fb is buggy, dev hsr_slave_0
[  441.416233] protocol 88fb is buggy, dev hsr_slave_1
23:57:59 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0)
dup(r1)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f0000000340), 0x0, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r6=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x53, 0xfa00, {{0xa, 0x4e22, 0x989e, @loopback, 0xfffffffa}, {0xa, 0x4e23, 0x8bd8, @ipv4={[], [], @multicast1}, 0x101}, r6, 0x7ff}}, 0x48)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r8 = dup2(r7, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:59 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000000000)=0xc)
setuid(r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000040)='./file0\x00', r2, r4)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:57:59 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:57:59 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:57:59 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:58:00 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:00 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:58:00 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xf}, 0x0, 0xffffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2a3329f6238ebe42)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:00 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'team_slave_1\x00', 0x30})
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='veth1_vlan\x00')

23:58:00 executing program 3:
socket$caif_stream(0x25, 0x1, 0x1)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x8)

23:58:00 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:58:00 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:00 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0400f3080000800000000000"])
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:00 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x22003, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x600adcebd1f90d3)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0)
dup3(r5, r2, 0x100000)
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:00 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="020081000000ff61"], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = openat$cgroup(r5, &(0x7f00000019c0)='syz1\x00', 0x200002, 0x0)
writev(r6, &(0x7f0000001b80)=[{&(0x7f00000009c0)="0cef9d73f772da8ccbfe761aa779ba5dd68bea743203b903e7d9a4659441580a4940e694aeaf3fccb293e87729dd70caacbfe5e176c464d752f3c9692a98ed3d8f60726e4b10", 0x387}, {&(0x7f0000001a40)="e62a4bfe0b742f30a90543ec8fbfd49f4135e2108040", 0x16}, {&(0x7f0000000800)="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", 0x137}], 0x3)
r7 = syz_open_dev$sndseq(0x0, 0x0, 0xb2c00)
r8 = dup2(r7, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000001c0)=""/14)

23:58:00 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:00 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:58:00 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x21004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x6, 0xffffffffffffffff, 0x6)
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
r1 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil)
shmat(r1, &(0x7f0000008000/0x3000)=nil, 0x2000)
shmctl$SHM_LOCK(r0, 0xb)
shmget(0x0, 0x2000, 0x100, &(0x7f000000a000/0x2000)=nil)
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r2, 0xb)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e)
shmctl$SHM_LOCK(r3, 0xb)
r4 = shmget$private(0x0, 0x1000, 0x68cdf5044a6c4582, &(0x7f0000fff000/0x1000)=nil)
shmat(r4, &(0x7f0000fed000/0x13000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x8, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0xd6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x80)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0xde6f, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:58:01 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x80000000}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @empty}, 0x1ebd}, @in={0x2, 0x4e20, @remote}], 0x98)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x200)

23:58:01 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)

23:58:01 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x121a00, 0xc)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xfffffffffffffffe, r0, 0x0)
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc000, 0x0)
fcntl$dupfd(r4, 0x406, r2)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0)
splice(r1, &(0x7f0000000100)=0x4, r3, &(0x7f0000000280)=0x80000000, 0x9, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000280)={0x2})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x200, 0x0)
ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000001c0))
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:58:01 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:01 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)

23:58:01 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:01 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)

23:58:01 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x5, 0x2, 0x1, 0x0, 0x400}})
shmctl$SHM_LOCK(0x0, 0xb)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)={0x8, 0x2, 0x8, 0x0, 0x9719, 0x7, 0xf9, 0x11, 0x3, 0x81, 0x0, 0x1, 0x0, 0x3ff, 0x6cd2, 0x6, 0x4, 0x40, 0x8, [], 0x81, 0x5e})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  443.430106] net_ratelimit: 4 callbacks suppressed
[  443.430111] protocol 88fb is buggy, dev hsr_slave_0
[  443.440095] protocol 88fb is buggy, dev hsr_slave_1
[  443.445318] protocol 88fb is buggy, dev hsr_slave_0
[  443.450540] protocol 88fb is buggy, dev hsr_slave_1
[  443.455676] protocol 88fb is buggy, dev hsr_slave_0
[  443.460772] protocol 88fb is buggy, dev hsr_slave_1
[  443.465889] protocol 88fb is buggy, dev hsr_slave_0
[  443.470993] protocol 88fb is buggy, dev hsr_slave_1
23:58:01 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

[  443.476207] protocol 88fb is buggy, dev hsr_slave_0
[  443.481303] protocol 88fb is buggy, dev hsr_slave_1
23:58:01 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/163, 0xa3}], 0x1, &(0x7f0000000800)=""/108, 0x6c}, 0x8000}], 0x1, 0x2, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:01 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040))
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:01 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:01 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x0, 'ip6_vti0\x00', {}, 0x5})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="0f7ab1de38ddeb2f5a1bae3f736563757269747900000000000000002478000000000000000000000000000003000000000000000000000000000000000000000000000000fe0f3eda32b4f56f9ee5f5dfa84e0000000000"], 0x58)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:58:02 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:02 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:02 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={<r3=>r1, 0x0, 0x6, 0x5, 0x8, 0x2}, &(0x7f0000000280)=0x14)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={r1, 0xfffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, {r3, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x8000}}, &(0x7f00000005c0)=0xffffff7b)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0xf37, 0xfee, 0x7, 0xe86, 0x40, 0x0, 0x5}, &(0x7f0000000180)=0x9c)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r6 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r7 = dup2(r6, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:58:02 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)

23:58:02 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x8, 0x0, 0x2, 0x0, 0x50b, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3e844f28, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'bond0\x00', {}, 0x5e88})
shmctl$SHM_LOCK(0x0, 0xb)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000340)=""/134)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:02 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x66, 0x0, 0x4, 0xca, 0xf, "944b2c8aad4d154325348a113e401d60712a6e"})
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 3:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f00000001c0)=0x10, 0x800)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x800, 0x142)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000140)='./file0\x00', 0x84)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time})
ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000000c0)=0x4c3)
syz_open_pts(0xffffffffffffffff, 0x82220)
syz_open_dev$vcsn(0x0, 0x5, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

23:58:02 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)

23:58:02 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ext2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x4000, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, r2, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f0000000340)=""/191}, {&(0x7f0000001880)=""/61, 0x449}, {&(0x7f0000002900)=""/4089, 0x597}], 0x46a, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000880)=ANY=[@ANYRES32=<r6=>0x0, @ANYBLOB="04ffffff7f928404000097a6a463d5e90d34764596fe0d000000000000000000000000000000f0d91c3ca35bbaf07b33ddf87e72fac63862e918b574b5e60f2cc7fa01"], &(0x7f0000000200)=0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r6, 0x8}, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r8, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r7, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r9 = syz_open_dev$mice(&(0x7f0000000840)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, 0x0, 0x34d)
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, 0x0, 0x0)
syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x121000)
r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, 0x0, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r12, &(0x7f00000017c0), 0x199, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
dup2(r11, r13)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f00005c6000)=""/6, &(0x7f0000000000)=0x4)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r5, 0x0, 0x0)
r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0)

23:58:02 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x84)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000180)={0x62, 0x1a, &(0x7f0000000400)})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r3 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x3, 0x0, {0x6, 0x7f, 0x3002, 0x7, 0x1, 0x6, 0x1, 0x1}})
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=<r2=>0x0)
sched_getattr(r2, &(0x7f0000000080)={0x38}, 0x38, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x1, 0x335)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x62, 0x0, &(0x7f0000000400)})
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(0x0, 0x0, 0x20a81)
r5 = dup2(r4, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000000)={0x0, @time})
syz_open_dev$vcsn(0x0, 0x5, 0x0)

23:58:02 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000602000/0x1000)=nil, 0x1000})
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100))
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)

23:58:02 executing program 5:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bond0\x00', {}, 0x5e87})
shmctl$SHM_LOCK(0x0, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x3, 0x0, 0x0, 0x4, 0xfd}}, 0xe)
r1 = openat$sequencer(0xfffffffffffff