x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

07:51:50 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:50 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @null, @default]}, 0x48)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000000c0)="fef6eb7925d940cb310f641e72702af6c731a0d6739b8ff1ee4233144827faea4f9ce52290969b8b7957e441d3359f5847e5")
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='\x00', 0x1, 0x4)
close(r0)

07:51:50 executing program 0:
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2)

07:51:50 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:50 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)

07:51:50 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800088b", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:50 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000001000214146120281ffff"], 0x20}}, 0x0)

07:51:51 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r5=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
write$UHID_INPUT(r4, &(0x7f0000000440)={0x8, "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", 0x1000}, 0x1006)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x401, 0x0)
fcntl$getown(r6, 0x9)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TCSBRK(r1, 0x5409, 0x800)

07:51:51 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:51 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @null, @bcast, @null, @bcast, @rose, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x375)
close(r0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x20, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000040)={0x6, 0x2, 0x8000, 0xfffffffb, 0x1, 0x7f})

07:51:51 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x80000001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
close(r0)

07:51:51 executing program 0:
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={<r8=>r7}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r8, 0x1, 0x4}, 0x8)
ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000000))

[ 3220.414368] net_ratelimit: 18 callbacks suppressed
[ 3220.414377] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.424505] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.429648] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.434861] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.494379] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.499589] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.504823] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.509923] protocol 88fb is buggy, dev hsr_slave_1
07:51:51 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:51 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000080000f0", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:51 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)

07:51:51 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000006000214146120281ffff"], 0x20}}, 0x0)

07:51:51 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000743f2d0e08e32e52a599b5336b1a2c70a2020000000000000078fff9449fce6a47d3a060ff1079d15fc23ed101b4dc89ff8441b18a6fe9cb9ffa05fc9c1932b8e47f7f8f5a71b271fb7053bb2be2a2149ff19a2d71a2051d079f4378c0062bc0659b2bfbb76fa9db71bd6bdd77b3f0c18fcb4072c8fb4bf1e7b7fdc96f6987f996acf6f89cae305fe9b9bbcae7f1f8963aeb6e6f8446a03ac0a2065c60bd41d4993cfe3ca882a019db331e400d937159ddfcb5900190ca1888d04c4dcfafa38ebcd73964d9e2d811c3c3fd", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @local}}}, 0x88)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x100)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000080)=0xffffffff)

07:51:51 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @bcast, @bcast]}, 0x48)
r1 = semget$private(0x0, 0xc, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semtimedop(r1, &(0x7f0000000040)=[{}], 0x1, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000300))
semctl$GETZCNT(r1, 0x8d331c473e21b517, 0xf, &(0x7f0000000000)=""/18)
close(r0)

07:51:51 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:51 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000040", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:51 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)

07:51:52 executing program 3:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x0, 0x7, 0x4, &(0x7f0000ff4000/0xc000)=nil, 0x2})
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r3, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x3ff, r3}, 0x10)

07:51:52 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x112}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:52 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
write$P9_RWALK(r2, &(0x7f0000000000)={0x4a, 0x6f, 0x2, {0x5, [{0x40, 0x4, 0x8}, {0x90, 0x4, 0x7}, {0x70, 0x1, 0x3}, {0x116, 0x0, 0x3}, {0x8c, 0x2, 0x2}]}}, 0x4a)
close(r0)

07:51:52 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="024526d32cc20c727f126b130ce1b669719a8d5401fda15f3deff1b45d7f68fd6fdc2f6dab3e02fa6abfd4db9963d445282a934bab133d2f7d25d7fb38715e0f59ca3b77464e5d076460175e0f8eae15cda16e823c78e5c22b83daa21ae72c50717abecf6bf8011b9b5fc38b8cd6f4de4914385c6c89bd97abd85332eee1", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x480901, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={<r5=>0x0, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x7ff}, 0x8)

07:51:52 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
bind$ax25(r1, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48)
close(r0)
ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x200})

07:51:52 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
close(r0)

07:51:52 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000f000214146120281ffff"], 0x20}}, 0x0)

07:51:52 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2)

07:51:52 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x118}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:52 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
pause()
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
r4 = accept4$inet(r2, &(0x7f0000002580)={0x2, 0x0, @multicast2}, &(0x7f00000025c0)=0x10, 0x180400)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002640)={0x6, &(0x7f0000002600)=[{0x6, 0x3f, 0x5, 0xaf}, {0xfff, 0x2b, 0x6, 0x3}, {0x40, 0x8, 0x20, 0xfffff001}, {0x6, 0x5, 0x81}, {0xfff7, 0x40, 0x3, 0x8000}, {0xfff8, 0x0, 0xc4, 0x8}]}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xe, 0xfff, 0x400}, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x3}}, 0x10)

07:51:52 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000003", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:52 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="da000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
close(r2)

07:51:52 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @bcast, 0x1}, [@null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48)
close(r0)

[ 3222.174499] protocol 88fb is buggy, dev hsr_slave_0
[ 3222.179677] protocol 88fb is buggy, dev hsr_slave_1
07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040))
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x4, &(0x7f00006f7000)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000100)={[0x6000, 0x0, 0x1, 0x10000], 0x9, 0x10, 0xe3})
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
write$selinux_attr(r3, &(0x7f0000000000)='system_u:object_r:usbmon_device_t:s0\x00', 0x25)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x6, 0x20000000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)

07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x3cb5, 0x200, 0x1, 0x5})
close(r0)

07:51:53 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x126}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:53 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @bcast, @default, @default]}, 0x48)
close(r0)

07:51:53 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000003214146120281ffff"], 0x20}}, 0x0)

07:51:53 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800ffff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:53 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:53 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000680)={&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)="ee780f4dacf1fc84bbaa3803dec2e1", 0xf}, {&(0x7f0000000580)="1d2b17b54663e5ae32e8d8a8e78c2d075736212168f6bf0abb4084d70fc8722e8a1156ecee460a0336f1ed6a9c8a55a76cd340f614efd8d459ff27ababef0fa1f65da73dd8dbbe0906f33a53ff9ed42121799374a1409b5f952936b52ae948339a252d29addf5fa39038865cbdc1b909f99556c11e6e68c977caa459d2c531c9733ed3b377d11e6404a6b1535678f4481b5f5f35d874c3bac2740286f132733d437c080eacf8", 0xa6}], 0x2}, 0x40)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r5=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = fcntl$dupfd(r6, 0x0, r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1ff, 0x101100)
bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=<r8=>0x0, @ANYBLOB="1b000000aa821d762b7f55b44c7df40500bd63a8464b9ccb2b0ae3a7154c4f9dec67325795fb85969a88e2fa9e915fd32cfcc5279b735d187843e8d8c2b6cd3a178098ed0a7e4a5440509d5cf78884240de1afb13c08ff88f283abaf437419ef5965fda4d9f23b6d92"], &(0x7f0000000040)=0x23)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8, 0x9}, &(0x7f00000000c0)=0x8)

07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @default, @default, @default, @null]}, 0xfffffffffffffdf1)
close(r0)

07:51:53 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:53 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)

07:51:54 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/8, 0x2})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
sendmsg$rds(r9, &(0x7f0000001840)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, &(0x7f0000001780)=ANY=[@ANYBLOB="58000000000000001401000008000000ff0000003f000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="ffffff7f00000000"], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="0300000000000000"], @ANYBLOB="090000000000000035fffffffffffffffeffffffffffffff03000000000000001000000000000000040000000000000048000000000000001401000001000000faffffff04000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000005"], @ANYBLOB="1600000000000000", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/255], @ANYBLOB="ff00000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000001680)=ANY=[@ANYBLOB='\x00'/150], @ANYBLOB="9600000000000000"], @ANYBLOB="030000000000000002000000000000000001000000000000"], 0xa0, 0x20000011}, 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf4be2d05f7eb605c8fca5f30abdc41fef2ae15c59c3a79ca4e9d76f8703a5350138c4a866a8562d37b73b0902fe26396bb8931182c530f55d0f6f0beffc719929c0b7ab53651d5459796d1adabe87", @ANYRES32=0x0, @ANYRES32=<r11=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r6)

07:51:54 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0xffffffffffffff18)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x1210c2)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/137)
close(r0)

07:51:54 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:54 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:54 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x2, {0xa, 0x4e24, 0xffffffff, @loopback, 0x9}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000280)="a6ad3709b506d0cb44806e68fd575308cbb3886263f1f2fb6aeaa1d062df45b87e2974140ec4eb1a5f6d5aef29f63f69796e4f3bb631a5383f0e4930c6ad3fcf9c4dc07938ec839b1e2a4a1e37b3f6e539df4f325a781bce6e2f8c0c0ad545f0cf46f82e7a6062e048bda50ac2f259e112b33af371b716380a8bd5c4c1419079943f39e868ceb0c17649a95b94a30be5966f85d8c644e00599d039caa770e7c99e794276fdce4db246cce17a35cd230ae513b876e15a163c", 0xb8}, {&(0x7f0000000180)="18adcbefdbe44d3363b2739c871ce992b8e23d3cdb33e2a74c1821018368a564c954", 0x22}, {&(0x7f0000000340)="173a460d8721c2ca9a19806335a1364e0e0958b3a4968ba5a1753b23fa80dedc73ac3f594aa50f7643f92a1176f16a0946aba209f65ccdf5073e215b65fc436d2a1e68b83175dff793ffc4dbcaca7d61a0c631652d6ac04ae9511d44e96fe5a9d0829ca8854e9dad1aaeee9b9c91e5571fdd3db2c1bc49c5b97c631397ef4050574de139731b4d5e79ccfd6878f2606b384b6ffe6a38e09d2ccdd3d71ffd5f1f9ea294d979037f5b432fd95fb00aa7aa70ac3d5246d95a915cec07099f89217e542387998886fc1b27de9ad34a1e1ecf93ec1f9e5650dd3b748226b8a310da315622b6c8b83803f2d4ecc777ab5869e401d69838f88da13e08cd269d0f0174c958d27f1395f4aa900265392dd544be5df894b27deed7e4b010ed18b630bbb72a1996c3ca3116de748453e371d8b1bac035f2888c15718f33c47becc0ac11fe897fdf00ba69adb3b5651fad0335478f2da3da0740db50d7d26665f4ee77c21b7fbb9468f8410be6dd08c39b50236997ba64b4b78577e65875159444ba4905498c0556e6f2b892878d4627e5606aeaf70c03e0b0442b6517b7481a9d6047bdabde95ac5f7dc35553400a87bdfcce5e66d88deede4a0b1e3bbe698c5fa00cf0da43f83025763fca7579bca70a3ebd966e5b5ea455e111a3556b4ab3eba4a8900eee158b1b99ffb93125f9198de8abfdf2ede49016277fcf710e7daab188b93cd1fe233bbe0006a84e1887b228bb401ae60b39deaa465776f943613b30e19ebc0e5cd73a0ab04b3c8a2a7cf1684e8354c59c3dd10ca42448533598a76c903dc88d9e0d68553affb1f8ab1d5734cffee9ec316c272c18db6b311c5ac9e90208edf7a668eae78f629d1a71ebe6c92a8fad11298813480d8fcdb0875243e696d102460a67a30e022b865c9c6e40a5baabb30e8f38a760dd4f85888ecc67834a5dae57222a6c99e2b90a5daab70df6672ac41e4ca4c7118de783a03d9127cba66cb308375b2a966398a8cb566c5728fc31f147f92135e3e732888f2ef61fbaa22efde6c5a83fddc9fd5e02ce38481c639709fc4739858985d2e0565df3ccf1ace50a1d908f796a8f2afe2ab43d5709629361e642aa618d05da613aaa048fbcc84462993b2ec07732cc54912022fc0f7a00bc8ca149f6d961002977feada2aa0c5f5e851bbff39ac5dc283b28225f1e17e8a7ac8f75a6a04ec8a1f0017944f444d073b24403eb3ac10c85fc338294f7bf47c74aef3a1a68d667464e2b5e049dfae546d72abf4cdd7a246d4135da36b5bf488bc37bfdef2f2373baba21185a0151cbaa3d8e6f3862ca8a033bedae7a6ab991ecdbfafc32ac743290dcc310abfb6e2a4543d9e10cbf5398ce60a8002d78ef10036e6deb12af0d49f11ee1eab01171017a7e4c5007289b79ba16d656db80248c2609eaa65983082e14164be9d5a8632042e791f399024cda262060e4b0c9bf0b4ce3aa7e6dc476ad66bd94419df715526ea5df73d0d7cccf4fdbf6510fce795eb3bdf7df84a289d621bfdcd40ea1b80b0faaa12d6490d81a314e71173a8b5509514b6aacd51b19944d36b8d2d3e8d853baa5d0cb34a6a7f716b977b4a1ff355eb77eec22ae31923806c85d6fb276957b5523222a45cab413f171ca1cc753214eaae315fcccf002c377a2d9dc47c7f387d529d1e4532a2fd56c66d7784c2aff3ab7dca9b59c513d35bc1f96b6987c73a6889244e5e4c20f124d01c8aadad58b1b3b6ecced291a4e204955b3ece6c449f2570ed510f914da94a68d8c21906bbd25100ab6f4b0e477210148e23eda25ddd3e34834563f3b3d138cbfcd59e03cd2283f8f8b590426ead07b63b288b057357314833ed415d15d1f79bc29eb699a28079a67c61556b80a555f7ed1160cb1fc7645786636bd4d9fe8d9f0f724f07138c10756e427b6ea63b8718f413d09e7706026e2dbe416654518bf02740fdb357c3a3afd50315839800932c1be07706a4497f8f3adac9ae1fee7c927eb5a7f2d765107f76d1803a7cbdd8bf01e6dc7d3b27fd4c6a2099791cd2afe9fc439fb5eb09a34659f7785a1f2d0c56edf1c6d90fb72edfce095f05e5ec231f0a12aae57c43af178cd5e4dbb2955607860cd47d4bad1f3662e18caa43ebc627e30e9a2a50dd5b5d30bc4401d88954fc8a6e722e13668639f7aef567a6f7a5ceff75da993b7caaede456603b46dcdef4fd079544e67186c1970981958bfb8302463e0009f6739e2816f5184231a4e3d5ba7dafdda9ba285e6b8cd3ef131c46b35d5ac97313d22802f1fbfbac67cb4fe24dacccd54927ba999497d2902c589d8d174f107c8f2bd44d16148a88d12acd653431206f188eadf1a7020092509d0e42813cdd5e9c8f755efd3314e23b81fa6a5fcf9fb373885fca924d1a9dbc1fd2bfc0759f81cdd03ca3f727824b0261b61b7729822d3b26a3f0430d31d2d98098a3d22811ba2efb3f1d91f8fc68396648b8f5f54a143d21a5e13a2132901ce1bc72b942820682265b40863fb09cd67b65e3b5a77b1952de2ff86b75eef6ff2f4fb2741f211221cee450c54164094b02c9af2a68fd91c3a3f5df3c3292812c7bacfb8f9aa4edf6aa287380699b36878090de4114aa44a92be47b79168655fb7c1dcc97c3845bb00acad3cdb68b2b613330d4e73afd17404216bb4865efbf7d90874cc7dbb09a07dd10a34f34ea314d240ec8b5a24493d3c064082a6761905ac8c69003eacac2ff82252a52fc6d8137b684eb53f1f7ed25f0d70bb26907fee0b91109ecaed6a34f940dbe0d0dabb0d94328d6c3a1140697d04e5a52389dd6ac9e51dd5c64ece9e0eed689036880c9d36caca484492eb603ae7a69e86b971c46b5f8c77e9df811794da11cb2ca6baf5de590be5985bfbd2e7f72b5711fa8dd6f76655237555d6612f61479efd3c00e140b862db43ae830d9509eb25a145749f57e21c3c1d54e79e572bb82a5211e5516827333085407e09b15d09b551d03ef124da873dceb3efb1204791537cd186eef4078a83b19f197c24634b272b32e32231702204ab1c43893eb300b01a891269c5c9584446d20a71b8e9ea7bcd0ca663cd0364506b5bc4b0761e87afd32a993454e9e711da3c8747d27e090a736db80ad7e79e2461d650bcf4e03d907ae057fca30ab6ea6b9741fdb0a2da255dfadd80966d04015e41da3326c1d546eecc16f016a03860e7cd3f5689ed07d8b03fae156d1af3de151a7bb4588fd779d0d5dc29e411058870e517ba9d9184369dd5827cf30956133f9178d9d6b2369ecf35abb3f2581dc8bc982988cb6f6677711b6a99eacaf5845c5f5173c086e30ab568c90a03e2717c90be97b9b8b63f5a3e7b12b36d2f53c758a6a9a16f65656cb15a9da5a78316e2b57f481d941fce49b26b4178e2ef2ecb75c3c1366b6970a03d6cc6944ecb62c89485397ec99ba6c4da439cd923958252ef94b274133f22f11580741e6cdbe8759a10a5566fbed61918398a51f631b3644920f887f47fbbe5732523cc3ee53512d3334b54de6094c4ee76d8300518d734a67538becfbbd7cd73010fb0c183f85e25a77f163a67447cbd07d1c27d80a0770d93fc3879dc92379f89532a7ebcd033fe94ecdbc2c94afe0a4fc3e8bbf5b0d075db1910fb7872551159e216ae807690247ffaf6ddbc585927aca075990f2ee4168a36377634ff9c007eb9a064b5123a1648bf8b5a672469c3262d346a905a5b5b12d62c94c9826b00f871f10d7814ec23547891989bbc76673e31950cfda68b388be0777fdcbdcc86b34d813045ca7179f9d05640568f12e6b20b1e766b08801d7b2391a981c6f8d5c095040156c507936d9e63d11df573c1537199f9f419b6298ac1c69e011253eb9e287e5980b46404639c1ceb3fa6e7175747553c60eae02f17bc8a08de11af4e01df9dfa5e5c1d06b0e6f0a8ba36a4da1a64dcb425d363b9ea58f635c11618a7573c26ac64917bb495dbcfb782e605a558942b111ce0310a4e50e1bb0059c5df614c67f371e01b68b7d8c9b3d59ecf50eed97983b381d5d1feb321b7b20247253d9db615d27015b155e1c0257d0cb0dcaf9427bb5894285492fd181a32e1f43ea05012467018ca4172cc73bd19002041827464fa638b547d9c2d4f43cf398cac12f223ee29c562236214ace7e5542fe8f04c384b26c927d0ca6c91dd2360447aafbc0f00e8e7993eb435db48e8dc0474e8740233551e1dad3c0f0dc93789a6ce5ff8191c0fd6ce3671a756e56d4ac5be2d170a6e874b2a27c59907855bdfe453deeb96209e297e6569958526aea2ecf2eadb03327cb04bb2b924fa30caab4b244f39d1b79c9b6e735f41c7b50cdb2f5231a932585fc9da9bac1dcf4e72685a2bc824d210462eb46555a32e414fc5483bb792517fcaa68691a076a7848aa312d15f9f9afc7b11a77c5115ed88fc2fc04ff7001a37b54a7da9ae8e5a9cb7b4ac3a2fd912e38b8b92bc416dc0e26431eb4402890b07f6408da55a83c8ec306e1179249923e571f4b0d377930a0b9c2960384c888c331c0ddbed5a9a8ae0e78155ada190b1ee5e60e0709055c7f8018d246ba8e3279f5a4343ab14e0caa5ca54ddfde5d9817b4841427226cda8a886aef1e500f50516c29b0f5a16e92632a23ad0780cae485039f8c424f81cd95e156dc5965ffc6201291f46fa88fa3f07eda678ac87efdd5af88443b9511cf617253e6c9e96e832c5d053c4f83525dfc8c75fc7ce7aaf02b20dc4cd3d38c9080ff5597fb2731e6033fa265ecc22e0ab0d52fe134a1a558cb0dce8ac3677901e61bb2f7d2c363c53c0d0dfcb91d5474baf9e14d6178b1eac7ec830fe13847d45dd83bd5904ce5aeb2fc4bd96e10d2228c03c2a104d916a7c7de712a8447e24369d8a00be00529d1cd76646c6ae87994bbd0ee34f9ed6039d5ea331bf31cf1bbf08ed975d0441c84c098286b5726ea970fad9f6cbc5bbba2a97b82584b678879ee3a5ea9560724ad4e5069cbedf9f751177e2125a04d824e32edc25bf716ec3d00b87d222c1c544fa6e1a60c98f9089f9fcbf59e875536ffd4ae9c25dfb30644328e3f11a60208a23327916317fc95fe62da1cc0dcc97b004429b9f8936a08c0a4d138d1df4e5851d89fe37ec93d63f4f63efd9ac5e9e0a3eff5c798cc762a8065aaf3ff1fe251d880960289a655b71c0e90c0654cd6607f3f05c3e532ad29cfc578ace6707c0be760c48a2ccab3054ccb745dee92228a16b315e7922eb843c6478858465c8dfe3e947236da349ba26a9c1419cd11e9fed9a98e80ec317c4742147ecce32479ef03a53a821da6ec029b877bd99d18dde54acd7951443f6e02e8bd52bc53bce4fc7c121d845cbdf394073cf52b664b9f9962f45dab6703672aa81aea0424ba78c6457ff3cb8131a0cf9a3b78ddc7fc352763258cffad159e55782fb89e3c491597a0f588d2d6e72dcfb0a0d7cc0ef003aa2056b74bb88584d71086cdb92b10dc29cc7c7ddabf9a01fc6bead87e3052aa22dd55682c35be5afaf9e64d1b56f0c5a000b681ea37415c1a1aff30028eb79ed0377808da3e2eb825188e62779a4ebb598ccc44421378850b265c4b6529ce1b6c27183d015df04753863c110c5905c4089d46658bc4545cb304ab77699cf801e6c93c62fd0a41bd9d98864f1bfc9085af3ae6a77b4a0985e0f23c05cc2e5be654a6f0284a7345feb05073b34179ea0e8c98371942bf6511908efc7ff3b13cc38cc45a933818a490470defecf11b7b657156d968ba065f7cfbd678f91f0e021ab29c2fb30fceae235cb02914febe1c0", 0x1000}, {&(0x7f0000001340)="b5df846d3f0255525bf255a9804b8312c77d12e4e7fa7bdfaff81220614a0e880c08339b27ce5ee9ea7e36968a31a5cba3ed9c1c6863f0d2457fa9a5cb6e9d9cefb74b53ec6ea9ac5dbeba2ac37b584af52a7c9ea47a05ca93e51b880b031036f196bf23ab4a697f29b335463c9bb9db6863cd57d7145bff7851d4468266d44b", 0x80}, {&(0x7f00000013c0)="a8b644c49c529abd232f667f8831dfe583a7edd28af9f66798f59ea675f3eec936ff8c9ac2956b458c2f0f4ee30ba9cadf73355b66ae8ec3c9a67cdc57b7a5505265b3b8bd4d1a1d3ac74153fbe1eab7177b8e7d80744c6504f3b021136916d7ca456fad321f9aa13056a4f1ae56a44fb7296cf104545ec4377e11e67c6b1d0b6aaa0ced42bf2a2179bf14397515ca237b4e6e8e2b7d212d23f9470da4eb0d48f21d286e4a31665ccb1af77a5362c279690dd14f0c8a2ccade22ee89a4", 0xbd}], 0x5, &(0x7f0000001500)=[{0x100, 0x102, 0x3781, "88a53844f1a53641834b833d8ab1d82399ee7aa084124653d41bc2ad087caaac1f17701d53d55bbc654208d86281b8135d6e779ed309865c57fee9af3b2ace3317a25866e2296e070aca7e2f72e8a6d454fa45489dc68b22e1e086f816270397d1b5b9501481ea0f103041c8dc12282de1532f259b201c002aa48068ee6027cd8555c89d1779cd12ab7a7b5015ba539e2ffce3abd834f70e1be6225f43e84239baf2a41ff81223de64a98a49535c250a45e8163890b1601644839dc980e90113526a56af132977d7c9c1618998aa0a41c07594565d562ab934fa5bc58db6d86c9792f68e066c19431d13"}, {0xf0, 0x105, 0x800, "9e7a0deb894cb185d50445e2ecf46498f74c03c0fa95c257d6f057c8a88e964d978cea03960750522feb0780e9f67f340b59743666d1351485dd4846e5cf063d549152ef74aea3056e5530c5d1677119893001226d864b2ae21986041102133fe72832cd46d77a68122273f9744a1330aba6aaede4972e07bdc2ba7c0022d03e341f554ccbfba34576f585b8688a251471f046ad0a54b45d1ce5763c998c3a6a148b36dae0fbd947993821d6eab536d22a5fa61184c8d536d60c70b97e3ee28d7e696b94b8d82d5f06f0e9b81d729e3e4023e0ea007920388e5266b71e0f6c"}, {0x68, 0x10f, 0x100, "3b0312d7d2a290bd27aa7dd8f6cdaf36dd02a4c12607ba7374b814debab52fb951dd2bd08d3d63b18cfd6fc91da3e16fefeed93724c318c5c3d4330bd721f96ba53636b9146ec5afe34ba4ab3b5f78dd25a85740b19b6824"}], 0x258}, 0x40040)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000f1b0e9f946ee6a67082e5949976b08e16edf516cca38184f41eff148845c421e5d38c878b88d5a721401ea41c1d542aa5ecddb6be88b26477b28063bbe803a4b851632143a6cc5bd8fe19f8592c7440a244e89eb49651af618fe185e718ce19b75be5f44f47e736f8d1813afbfb83a2145c99a8076aee8c94ea55ce0530eedc13c5ad728da0d0e4b3ca30f4256a9db9795a45593aa9ef426f24a0595da2ea180b03d0a571e368c7d9e9c6b48db898f7efc94c90cf0b8a6487d7836e14fc2ed4553fe36cd8515f4ca87b9727e7147e9deb26d36b5b739e1587edb4dbb26e923", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
fchmod(r2, 0xc)
close(r0)

07:51:54 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000b03214146120281ffff"], 0x20}}, 0x0)

07:51:54 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x161040, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x19, 0x12, 0xb, 0x1d, 0x2, 0x2, 0x3, 0x2c, 0xffffffffffffffff})

07:51:54 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:54 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3223.872774] audit: type=1400 audit(1574149914.687:10271): avc:  denied  { write } for  pid=5672 comm="syz-executor.0" name="net" dev="proc" ino=484204 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1
[ 3223.932150] audit: type=1400 audit(1574149914.727:10272): avc:  denied  { add_name } for  pid=5672 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1
[ 3223.962866] audit: type=1400 audit(1574149914.727:10273): avc:  denied  { create } for  pid=5672 comm="syz-executor.0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1
07:51:54 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r4, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r5, 0x0, r5)
r6 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r10, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
setreuid(r11, r12)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fchown(r0, r11, r13)
r14 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x151103, 0x0)
r15 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x404c0, 0x0)
getsockname$llc(r15, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
fcntl$setlease(r14, 0x400, 0x2)

07:51:54 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000340)="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", 0x1000, 0x2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="024526d36fe031ddf605162bdf0ecb3b9a4c0031fbe0eaa086d0e4ab1ee5c96d3eea20eeb3d83ae4b3a8992ec595725a9d01de82b0377fc406b8a0bf701c8a9e8fad7c9fd4278f897e42c2381616c9494eac2c4021f268c97ba3c851f248c29116db397084b03e191b04d51ce6e4013e1d37b36bc7894d5a77d8c60313d16f4ecb64090c7b54d04b750838a4479f1da86d6e8227f2acfe6ca2707eea485f2a49d2b003d9d0a7bb23db686d749a91798418bc3daad8b9", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x111480)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f00000000c0)={0x1ff, 0x1})
r6 = accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180)=0xfffffe01, 0x4)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'ip6erspan0\x00', 0x100})
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
close(r0)

07:51:54 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:55 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x283)
close(r0)

07:51:55 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_MCAST_LEAVE_GROUP(r7, 0x0, 0x2d, &(0x7f0000000340)={0x2, {{0x2, 0x4e21, @empty}}}, 0x88)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000014000905000000000000000002180000692f0b63f37b18c193a49d2dc7825c2f4dedefe5af54f1c3501dc6d136e210701f1355d309b950d280ebc7593a30605d108c4a00", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', r9})
close(r0)

07:51:55 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r0, 0x0, r0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3])
chown(&(0x7f0000000000)='./file0\x00', r1, r3)
r4 = semget(0x3, 0x4, 0x408)
semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000004c0)=""/179)

[ 3224.365186] hfs: unable to parse mount options
[ 3224.387139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3224.461719] IPv6: ADDRCONF(NETDEV_UP): veth5471: link is not ready
[ 3224.469571] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3224.469936] hfs: unable to parse mount options
[ 3224.491078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3224.512376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
07:51:55 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:55 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:55 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:55 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@bcast, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close(r0)

07:51:55 executing program 0:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffff8000, 0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\x98\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82\xeb\xc3s\xdf\xa6Z7G \xd4\x17\xcc\r\x12>pq\xa5\xbd\xf7o\x00\x00\x00\x00Y%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$Vk9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x17K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952', r4}, 0x10)

07:51:55 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000006214146120281ffff"], 0x20}}, 0x0)

07:51:55 executing program 3:
bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(0xffffffffffffffff)

07:51:55 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x8175, 0x2000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r0}, 0x10)

07:51:55 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x190}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:55 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000a214146120281ffff"], 0x20}}, 0x0)

07:51:56 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:56 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:56 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:51:56 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:56 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x4)

07:51:56 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:56 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000030b214146120281ffff"], 0x20}}, 0x0)

07:51:56 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:56 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='procproc\x00', r1}, 0x6015e073747b722)

07:51:56 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:56 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:56 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:56 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x1, 0x0, 'client1\x00', 0x4, "28ecc61a022ddb97", "6d382ea58098f49d683df5ab1e4817a7dece8a6c0a1ffacc1de25133431f10ff", 0x80, 0x7f})

07:51:56 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:57 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000c214146120281ffff"], 0x20}}, 0x0)

07:51:57 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:57 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r0}, 0xfffffffffffffc83)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x6, 0x20}, 'port0\x00', 0x8, 0x100000, 0x3, 0x0, 0x20, 0x3f, 0x5, 0x0, 0x4, 0xb})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="00000d00000000079f3c39a7d42ad28b0cbc76faf7bf44da14080000005c36d3ff99d4c3587fb28d2751dd0fd4ce57557a0ac566a7fce1540849cdf8001d4a10f30706d6d56bae2034f34984765df541edfcfadae0543a7c732806c5a1f894f02dbf2fc07327ccb30eb9fcc4caf7135ba28f516c99fdcf11490897a9d1e5cc7bc5054fa83b5a8af4fbd350bac238ed476f9095711d88bf60fc1e5a55bf755c09274fd159b4c08ba289b221db9acbdf431502454b8e29dd0e07a88634ad81258c36ae729b799e56c9ae"], 0x48}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r8, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000300)={{0x1, 0x0, @identifier="946bd07d68d3b365331dff25b1d1a663"}})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@getspdinfo={0x11c, 0x25, 0x300, 0x70bd2b, 0x25dfdbfb, 0x7, [@offload={0xc, 0x1c, {r3, 0x2}}, @sec_ctx={0x20, 0x8, {0x1a, 0x8, 0x1, 0x3, 0x12, "b1ac0e66f6fbff44716e80286813bcafc362"}}, @etimer_thresh={0x8}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sec_ctx={0x10, 0x8, {0xc, 0x8, 0x1, 0x13, 0x4, "94530770"}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, [], 0x1c}, @in=@loopback}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd29, 0x70bd2c, 0x70bd2d, 0x70bd29, 0xff, [0x5, 0x100, 0x100, 0x10000, 0x5, 0xfff]}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in, 0x0, 0x1}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2b, 0x3}}, @coaddr={0x14, 0xe, @in6=@mcast2}]}, 0x11c}, 0x1, 0x0, 0x0, 0xcd505fc2d7a3b506}, 0x24094)

[ 3226.334372] net_ratelimit: 6 callbacks suppressed
[ 3226.334380] protocol 88fb is buggy, dev hsr_slave_0
[ 3226.334461] protocol 88fb is buggy, dev hsr_slave_0
[ 3226.339362] protocol 88fb is buggy, dev hsr_slave_1
[ 3226.344501] protocol 88fb is buggy, dev hsr_slave_1
[ 3226.369749] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:51:57 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3226.396861] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:51:57 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r5, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={<r6=>r5, 0x20}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r6, 0x1, 0x8, [0xf75, 0x6, 0xb1a, 0x7, 0x2, 0xf9e, 0x0, 0x3ff]}, 0x18)

07:51:57 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3226.654360] protocol 88fb is buggy, dev hsr_slave_0
[ 3226.659548] protocol 88fb is buggy, dev hsr_slave_1
[ 3226.664757] protocol 88fb is buggy, dev hsr_slave_0
[ 3226.669834] protocol 88fb is buggy, dev hsr_slave_1
07:51:57 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000e214146120281ffff"], 0x20}}, 0x0)

[ 3226.734671] protocol 88fb is buggy, dev hsr_slave_0
[ 3226.739842] protocol 88fb is buggy, dev hsr_slave_1
07:51:57 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:57 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xfffffffffffffc7f)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettclass={0x28, 0x2a, 0x500, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {0xc, 0xa}, {0x10, 0xe}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000d0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010000c4", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = fcntl$dupfd(r5, 0x0, r5)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000140)=0x726ce197, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r4, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x3f, 0x4, 0x4}, &(0x7f0000000100)=0x10)

07:51:57 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:57 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:57 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:58 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:58 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bind$bt_rfcomm(r4, &(0x7f0000000140)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0x86}}, 0xffffff46)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xeb9a9bf0f6cc0926, 0x6, 0x20, 0x3, 0x4}, 0xffff, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x81, 0xffffffffffffff79, 0x7fff})
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:logrotate_exec_t:s0\x00', 0x26)
r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x2)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000066d5da472d2e00000000"], 0x78)

07:51:58 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:58 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000f214146120281ffff"], 0x20}}, 0x0)

07:51:58 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:58 executing program 1:
syz_open_procfs(0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:58 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @local}, 0x5, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='ipddp0\x00', 0x1c6, 0x8, 0x3ff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:51:58 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x226}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:58 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:58 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f00000000c0)={0x7, 0x7})
accept4$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000)

07:51:58 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), 0x4)

07:51:58 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x228}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:58 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='posix_acl_access\x00'}, 0x10)
socketpair(0x5, 0x1, 0x1, &(0x7f0000000000))

07:51:58 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000003f214146120281ffff"], 0x20}}, 0x0)

07:51:58 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:59 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x996308adfa493e3a}, 0x10)

07:51:59 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:59 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:51:59 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:59 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r4, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>r8})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x23, r9})

07:51:59 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000006558214146120281ffff"], 0x20}}, 0x0)

[ 3228.573408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
07:51:59 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x242}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3228.614718] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready
[ 3228.643599] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[ 3228.748816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3228.780894] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:51:59 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:51:59 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)

07:51:59 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:51:59 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000300)={0x5, 0xff, 0x1})
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x8000, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x118, 0x13, 0xb, 0x200, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x24}, [@generic="43c1f9aedcb94d0fde74888ac437d56075d5e8fce4772f66bcb036e540d9ffd3c71484fa4657089c60f61aa298bd29cec9b56eef182cfea3fbb2ed9946b31895ce730a9859c4faa24e11faa2906aad024b151bdd0d5892d8b9d8ae07231b92cd7d41878ba0ab176af7cfd208e055eeb8787602d827bb03606c49d376e7ebb91451d9580344f213d01654f8d70bbb8012ef0d095a33fcc0c89ec91b51ebabe4a96b3615499ceceebd7c2fbe5683599ada28230f6b484d5d1cdfe1c2010983fac1c3bef05b2189ca683857de8b297a871e2238084e89ae495f6fb61ba69b045e041433", @nested={0x20, 0xe, [@typed={0x4, 0x59}, @typed={0x14, 0x60, @str='/dev/dlm_plock\x00'}, @typed={0x4, 0x44}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008004}, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x34472dda60d5d4}, 0x10)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
r2 = getpid()
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r3, r4, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
kcmp(r1, r2, 0x4, r3, r7)

07:51:59 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000060214146120281ffff"], 0x20}}, 0x0)

07:52:00 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x894900, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:00 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x252}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:00 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xfefceeb9fe2b7b20, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r2, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x6, 0x3, 0xf}, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x107202, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x2}, 0x1c)

07:52:00 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:00 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x0, @name="b09d199280d9aa7a0f296795628d2ec3eea6996f4715e8866d1f613c0739b136"}, 0x8, 0xfffffffffffffffb, 0x4})

07:52:00 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:00 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000005865214146120281ffff"], 0x20}}, 0x0)

[ 3229.569591] QAT: Invalid ioctl
[ 3229.579415] QAT: Invalid ioctl
07:52:00 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r2}, 0x6272b5bdc2849fa)

07:52:00 executing program 0:
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
syncfs(r0)

07:52:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:00 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:00 executing program 0:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xa5, 0x90e00)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x9, 0xc, [0xffff, 0x7, 0x9]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)

07:52:00 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:00 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:01 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:01 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000081214146120281ffff"], 0x20}}, 0x0)

07:52:01 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:01 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q7\xe5\xbe`\xcf<f\xbb\xa6c9\x14\xeai\xaa'}, 0xc)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:01 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:01 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x286}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:01 executing program 0:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:01 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff030000000000f0214146120281ffff"], 0x20}}, 0x0)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:01 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:01 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100000, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:01 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x288}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:01 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x294}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r7, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
fremovexattr(r3, &(0x7f0000000000)=@random={'trusted.', '\x95\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x4, 0x0, [], [{0x0, 0x3, 0x6, 0xffffffffffffffff, 0x5, 0x8}, {0x2, 0x5, 0x1, 0x59, 0xd0ae, 0x100000001}], [[], [], [], []]})

07:52:02 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000002214146120281ffff"], 0x20}}, 0x0)

07:52:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
accept$ax25(r0, &(0x7f0000000200)={{0x3, @null}, [@remote, @null, @null, @bcast, @netrom, @default, @bcast, @rose]}, &(0x7f0000000280)=0xa772d2ce006bab77)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc6bb6b6fc9fc95b1, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/187)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0)
sendfile(r2, r3, &(0x7f0000000140)=0x3, 0x3)

07:52:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:02 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000003214146120281ffff"], 0x20}}, 0x0)

07:52:02 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:02 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:02 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8001, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df00107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364506b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99526c2aed6d90fff50cc840f630b17a4a827b1a7500", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={0x0, 0x20000}, 0x8)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = fcntl$dupfd(r7, 0x0, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffffffffffdcd)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00')
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000001907"], 0x48}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000004c0)=[@hopopts_2292={{0x168, 0x29, 0x36, {0x16, 0x29, [], [@jumbo={0xc2, 0x4, 0x2}, @pad1, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x6, 0x20, [0x8, 0x4, 0x7, 0x7, 0x5, 0x6, 0x100000000000, 0x9]}}, @generic={0x3, 0x6e, "df3c7d3f9c1624e4a88107c5c8fb788d3852373bdd5b1b0fed76990e1602198a080ae76cf14fb0b1597f57c138e4c7f81fb34153d99117340a2ebfa42613cf042e06fd3313f29e277e88fe4f3b1bb60e7eec2693c337b7d6adaeeca18b6d49c6cfc06f37d9910918c148cbef348c"}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x20, {0xa14, 0x6, 0x5, 0x0, [0x27fc, 0x1, 0x7fffffff]}}, @generic={0x80, 0x5e, "991fe5e69c77b7b10a7bb9828e38ad8252667fb198ca5d90d6a40b513b9282ce73520180f85469f0376b76c5a31ee07ddc9810de0cac065afa9c382f4ebfc14f4e7d11fa780fef8247f19aca0133494a318acb420e65e0d63555573914a7"}]}}}, @hopopts_2292={{0x140, 0x29, 0x36, {0x2c, 0x24, [], [@ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x1f, 0x1f, "ea644824048f459c505dd355cf42ebc2f090ae9b58a3ef849e2b3982918979"}, @generic={0x1, 0xf0, "900f5d9d6dac3bb26a6748e58494e98dd288541e3f1a41c9fe98fa606e66210265d5f13ead9295b29c70c2a26ae1feb4f4382e5937d23d4a7aa845ea6f169453184ca37d377653df705b48878886ff0841fa574770abb7137d7c1aeeaac1d5bd75b4759d597c48b2d7cf9a5cfb055547d0fd96fe489c36fab9e4a9e100cfeae1144bdcf6afb7733a3ee735c8d309306d9d4775229b83d1b107ce561e2701112bb040d6ac32d831a9948acdf008d979fe701421e946f6042b981093eaa1b92426a5f60af369fd3123cdeaef6b6446ee746c5888adad554b7a56be0bc1820efbda16b4b6663120eb3be78b56f145aebc24"}, @jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x20}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @rand_addr=0x1}, r9}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x62, 0x5, [], [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x3f, 0x2, 0x1, 0x0, [0x1f]}}, @enc_lim={0x4, 0x1, 0x7b}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r13}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x3b0}, 0x4040840)

07:52:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, 0x0, 0x0, 0x0)

[ 3232.154095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
07:52:03 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3232.226414] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready
[ 3232.252111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3232.288265] IPv6: ADDRCONF(NETDEV_UP): veth7: link is not ready
[ 3232.296440] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:52:03 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:03 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000004214146120281ffff"], 0x20}}, 0x0)

[ 3232.361367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3232.467051] IPv6: ADDRCONF(NETDEV_UP): veth9: link is not ready
[ 3232.482469] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:52:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, 0x0, 0x0, 0x0)

[ 3232.549822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3232.574595] net_ratelimit: 18 callbacks suppressed
[ 3232.574603] protocol 88fb is buggy, dev hsr_slave_0
[ 3232.575810] protocol 88fb is buggy, dev hsr_slave_0
[ 3232.579666] protocol 88fb is buggy, dev hsr_slave_1
[ 3232.585439] protocol 88fb is buggy, dev hsr_slave_1
07:52:03 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ce}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3232.615477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6281 comm=syz-executor.0
07:52:03 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3232.723921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3232.783216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
07:52:03 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3232.858547] IPv6: ADDRCONF(NETDEV_UP): veth11: link is not ready
[ 3232.887388] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
07:52:03 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000006214146120281ffff"], 0x20}}, 0x0)

07:52:03 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}, 0x48)
close(r0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, <r2=>0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r2, 0x3})

[ 3232.974374] protocol 88fb is buggy, dev hsr_slave_0
[ 3232.979505] protocol 88fb is buggy, dev hsr_slave_1
[ 3232.984722] protocol 88fb is buggy, dev hsr_slave_0
[ 3232.989805] protocol 88fb is buggy, dev hsr_slave_1
07:52:03 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, 0x0, 0x0, 0x0)

07:52:03 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x3f, "da825c62bbf38280126fd35ca10ccc76ee50125802876ea507752d849f6b8676", 0x2, 0x4, 0x3, 0x1000, 0x2})

07:52:04 executing program 1:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
syslog(0x0, &(0x7f0000000280)=""/93, 0x5d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

07:52:04 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r2, 0x0, r2)
signalfd4(r2, &(0x7f0000000040)={0xfff}, 0x8, 0x390e65ce34db3c44)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r3, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r3)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f00000000c0)={0xffff7fff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x88)

07:52:04 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:04 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1)

07:52:04 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @bcast, @null, @null, @bcast, @rose, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
close(r0)

07:52:04 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x60800, 0x0)
write$binfmt_elf64(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x61, 0x8, 0x6, 0x3, 0x3, 0x3, 0x3, 0x191, 0x40, 0x1e4, 0x1, 0x3, 0x38, 0x1, 0x1, 0x81, 0x2000}, [{0x1, 0x8000, 0x8, 0x7fff, 0x9, 0x6, 0x81, 0x6}, {0x6, 0x9, 0x51, 0x8, 0x8, 0x3, 0x5}], "731086e72613f38a7655e6c8c76b973d850431a9d5e1d36c7a9cf953942265ea37318d10a5c48745b92a1ee206e0ef201e64baf1b96a38be24edd8059757f29c6e3eed2ece43f92b93062fad2e4bfe3043785436cbe25251b1272e48094d1b731d17", [[], [], [], [], []]}, 0x612)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)

07:52:04 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800ffff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:04 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:04 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000a214146120281ffff"], 0x20}}, 0x0)

07:52:04 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
close(r0)

07:52:04 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r0, 0x0, r0)
finit_module(r0, &(0x7f0000000000)='self{+#{em0)Tsystemposix_acl_access\x00', 0x0)

07:52:04 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default]}, 0x48)
close(r0)

07:52:04 executing program 1 (fault-call:2 fault-nth:0):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:04 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000001c0)={0x4, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @multicast1}}}, 0x108)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0245037dd3d0c8b7da1d8f978a9431dcc461be429e50f4653a9793047863482d1b1cd87f26d9f3c0d25fa9835b837efecb19c53dfc913d65dc3a73cf705e1c5233ecc718a56fdb4e03782a810321a5378bf0b767f335", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0xfffffffffffff30a, 0x5})

07:52:04 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$key(0xf, 0x3, 0x2)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000000)={0x0, 0x7ff})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = fcntl$dupfd(r8, 0x0, r8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TIOCSSERIAL(r9, 0x541f, &(0x7f0000000080)={0x7, 0x3, 0x8, 0x8, 0x3, 0x215f85e9, 0x100, 0x4, 0x2, 0x3f, 0x6, 0x40, 0x5, 0x1, &(0x7f0000000040)=""/38, 0x0, 0x60d, 0x5})
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
dup3(r3, r10, 0x0)
fcntl$dupfd(r1, 0x6a78c64c5ae6839c, r3)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x1)

07:52:04 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:04 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:04 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000c214146120281ffff"], 0x20}}, 0x0)

07:52:05 executing program 0:
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'bridge_slave_1\x00', 0x1000})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x9, 0x2, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000040)={0x3, 0x10001, 0x3, 'queue1\x00', 0x6})

07:52:05 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:05 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xcbe0da7bc224025c}, 0x100)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = fcntl$dupfd(r6, 0x0, r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r8 = getpgrp(0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r9, 0x0, r9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setreuid(r10, r11)
fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$unix(r7, &(0x7f00000008c0)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)="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", 0xfa}, {&(0x7f0000000540)="20ae7d2c7eee68f959ce2962b348e2e104c740cc487f46a7aa45a24c955d7af0ff3599f6f34b0f51875e1d85998cbf77d4835cb8ca32cdde3f3dc084d8384c0d805c2489ffea5ba12c209f86120ea66c1136e2faac762df021610d6c9b636a2037a9c0bcba1f6c993da2b1cafe6d24a875f4def6b1c1c84deea6c521145e658f3b", 0x81}, {&(0x7f0000000600)="41892bd98bf75d4a7ccc1c6af8bd4ce275e628e771dc8a70504f9a6a358697", 0x1f}, {&(0x7f0000000640)}, {&(0x7f0000000680)="4e3dfa06e2b1974cd15735eb", 0xc}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="a8b23d04de5791585792d52692bd00234f8d494168cf8cdea18aac459cccdc21c50eb83ea67a696c2bfcb9fcd09a4dff6efa4dabbd666accb998f2265a5ba132bc9142fd7fcfa6f17388fe7acb3ac74905906d469386c07c13948366943aca05aece6be5a1d84a3e3eff97d4b19beb17f5491810", 0x74}], 0x7, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}], 0x20, 0x4c04}, 0x40000)
close(r0)
setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x45, 0x4, 0x8, "f14c1220adb23c1937f7e4dff145e1f1", "65890cd4ceaafac136bbca32e73cc5f448f3e007fef018a7d3b4d9f805cd26edbe7641c95ee690865e4af0a10e7a6101"}, 0x45, 0x5)
r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
ioctl$SIOCAX25GETUID(r13, 0x89e0, &(0x7f00000000c0)={0x3, @default, r14})

07:52:05 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='\\\x00'}, 0x30)
sched_getaffinity(r1, 0x8, &(0x7f0000000100))
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={[], 0x16b, 0x6, 0xee3, 0x17, 0x200})
close(r0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000200)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2})

07:52:05 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3234.654369] protocol 88fb is buggy, dev hsr_slave_0
[ 3234.654484] protocol 88fb is buggy, dev hsr_slave_0
07:52:05 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x80}}, 0x10)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r5, 0x0)
close(r1)

[ 3234.842697] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3234.982682] FAULT_INJECTION: forcing a failure.
[ 3234.982682] name failslab, interval 1, probability 0, space 0, times 0
[ 3234.996212] CPU: 0 PID: 6422 Comm: syz-executor.1 Not tainted 4.19.84 #0
[ 3235.003094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3235.013680] Call Trace:
[ 3235.016295]  dump_stack+0x197/0x210
[ 3235.019957]  should_fail.cold+0xa/0x1b
[ 3235.023862]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 3235.029767]  ? lock_downgrade+0x880/0x880
[ 3235.033918]  __should_failslab+0x121/0x190
[ 3235.038145]  should_failslab+0x9/0x14
[ 3235.041996]  kmem_cache_alloc_trace+0x2cc/0x760
[ 3235.046672]  ? find_held_lock+0x35/0x130
[ 3235.050796]  ? dev_map_notification+0x31b/0x450
[ 3235.055518]  netdevice_event+0x1c8/0x7e0
[ 3235.059578]  ? update_gid_event_work_handler+0xc0/0xc0
[ 3235.064849]  ? _roce_del_all_netdev_gids+0x30/0x30
[ 3235.069772]  ? roce_gid_type_mask_support+0x100/0x100
[ 3235.074954]  ? ip_vs_dst_event+0x262/0x680
[ 3235.079177]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 3235.084356]  notifier_call_chain+0xc2/0x230
[ 3235.089606]  raw_notifier_call_chain+0x2e/0x40
[ 3235.094187]  call_netdevice_notifiers_info+0x3f/0x90
[ 3235.099291]  rollback_registered_many+0x894/0xda0
[ 3235.104129]  ? tun_show_group+0x180/0x180
[ 3235.108264]  ? generic_xdp_install+0x3d0/0x3d0
[ 3235.112839]  ? mark_held_locks+0xb1/0x100
[ 3235.116973]  ? linkwatch_schedule_work+0x13c/0x170
[ 3235.121910]  ? queue_delayed_work_on+0xe6/0x200
[ 3235.126563]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3235.131133]  rollback_registered+0x109/0x1d0
[ 3235.135524]  ? rollback_registered_many+0xda0/0xda0
[ 3235.140528]  unregister_netdevice_queue+0x1ee/0x2c0
[ 3235.145530]  __tun_detach+0xd8a/0x1040
[ 3235.149408]  ? __tun_detach+0x1040/0x1040
[ 3235.153557]  tun_chr_close+0xe0/0x180
[ 3235.157344]  __fput+0x2dd/0x8b0
[ 3235.160621]  ____fput+0x16/0x20
[ 3235.163885]  task_work_run+0x145/0x1c0
[ 3235.167760]  get_signal+0x1baa/0x1fc0
[ 3235.171546]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3235.177067]  ? tun_chr_read_iter+0x180/0x1e0
[ 3235.181484]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3235.187291]  do_signal+0x95/0x1960
[ 3235.190827]  ? __inode_security_revalidate+0xda/0x120
[ 3235.196009]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3235.201532]  ? setup_sigcontext+0x7d0/0x7d0
[ 3235.205845]  ? kick_process+0xef/0x180
[ 3235.209720]  ? task_work_add+0x9c/0x110
[ 3235.213719]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3235.219364]  ? fput+0x128/0x1a0
[ 3235.222628]  ? ksys_pread64+0x121/0x1c0
[ 3235.226628]  ? exit_to_usermode_loop+0x43/0x2c0
[ 3235.231318]  ? do_syscall_64+0x53d/0x620
[ 3235.235362]  ? exit_to_usermode_loop+0x43/0x2c0
[ 3235.240019]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 3235.244626]  ? trace_hardirqs_on+0x67/0x220
[ 3235.248935]  exit_to_usermode_loop+0x244/0x2c0
[ 3235.253511]  do_syscall_64+0x53d/0x620
[ 3235.257388]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3235.262561] RIP: 0033:0x45a639
[ 3235.265747] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3235.284629] RSP: 002b:00007fc925b6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[ 3235.292348] RAX: fffffffffffffe00 RBX: 00007fc925b6ec90 RCX: 000000000045a639
[ 3235.299601] RDX: 0000000000000027 RSI: 0000000020000200 RDI: 0000000000000003
[ 3235.306854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 3235.314454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc925b6f6d4
[ 3235.321722] R13: 00000000004c7ea9 R14: 00000000004dddb8 R15: 0000000000000004
07:52:06 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:06 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom, 0x20000006}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
close(r0)

07:52:06 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:06 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800ffff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:06 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r2, 0xc4c2c822e4e11799, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x274, r2, 0x500, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x452}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8ad7, @ipv4={[], [], @empty}, 0x52}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x180f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x45}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5926}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffb3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29d97117}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7da9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xad}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4be}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x25ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2ee0e10d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x274}, 0x1, 0x0, 0x0, 0xdb52be528f87cade}, 0x40)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0xae, 0x4)

07:52:06 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000e214146120281ffff"], 0x20}}, 0x0)

07:52:06 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
close(r0)

07:52:06 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xd, 0x66080)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x10001, 0x10001, 0x7fffffff, 0x611d36dac5e0a548, 0xffffffffffffffff, 0xfff, [], 0x0, r2, 0x1, 0x1}, 0x3c)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
fcntl$dupfd(r4, 0x0, r4)
close(r4)

07:52:06 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:06 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000a059faf32142d3c8db66fe093341e6aebafa3c7da1cdf0450da72cecf0c31bcbd4a61e79c7fe583959c25bc2d11f4f6ecba27955ed401295b641f96f7ecdd4d127c46029cd3260021f7efa2f88cfd040d04fe06b4457d9082b3da68cc51e78ee3c6a94d4", @ANYRESHEX=r5])
write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0, 0x0, 0x7, {{0x0, 0x3, 0x100000000000101, 0x5, 0x1000, 0xe6d4, {0x4, 0xe8cb, 0x6, 0x1, 0x4, 0x1, 0x8, 0x400, 0x7, 0x6, 0x6, 0xffffffffffffffff, r5, 0x88, 0xffffffff}}, {0x0, 0x9}}}, 0xa0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r6, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={<r7=>r6, 0x1}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r7, 0x5}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r1}, 0x10)

07:52:06 executing program 3:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="021a9f5fa000"/17, @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
sendto$ax25(r3, &(0x7f0000000040)="12e077f290c349", 0x7, 0x84, &(0x7f0000000080)={{0x3, @null, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526db", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000100), 0x4)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = fcntl$dupfd(r9, 0x0, r9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r10, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000140))
ptrace$peek(0x2, r0, &(0x7f0000000000))
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r11, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r11)

07:52:06 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28500002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8004)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)

[ 3235.734067] hfs: can't find a HFS filesystem on dev loop0
07:52:07 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x352}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:07 executing program 3:
bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x4b, 0x6, 0x1}, {0xd1, 0x5, 0x6, 0xfffffc00}, {0x5, 0xff, 0x2, 0x6}]})
r1 = socket$inet(0x2, 0x4000000805, 0x42)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r1, r3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xeb8e, @mcast1, 0xfffffffc}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x16}}, @in={0x2, 0x4e20, @empty}], 0x58)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = fcntl$dupfd(r5, 0x0, r5)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0xffff, 0x753, 0x8200, 0x6, 0x3ff, 0xffff0001, 0x5, 0x200, <r7=>0x0}, &(0x7f0000000340)=0x20)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="024526d3d1cd685b293e81ce9c099819275f191806b1614db4a55f4f814197f8628565af6ee98e72e9b1b1e73b0a60cddc878631fe94732eaa53bae9f7", @ANYPTR, @ANYRES32=<r11=>0x0], &(0x7f0000a8a000)=0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000)
sendmsg$can_raw(r10, &(0x7f0000000540)={&(0x7f0000000440), 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x1, 0x1}, 0x3b, 0x2, 0x0, 0x0, "24e33af7f698d001b22ab75ad5544a377529d44ff7e75f82686a60f4db275fd81f69da7bf310411e6e982bdc0332fddc7c9d1258d38d90503cfe61ed999de8ee"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000802)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000380)={r7, 0x1, 0x7, [0x7, 0x9, 0x9, 0x6, 0x61a, 0x7, 0x6]}, 0x16)
connect(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0xfe813d832d31e4a7, 0x7f, 0x0, "0e7161778d17097cff94f736cddaa3ecab7dfd4d488ec1ff3e734ab5b83025ffe9cb8de6efe92d49c184fab401b899cceac1c304d7ed03e05ebfb0f5305515", 0x5}, 0x80)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r12=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000080)={<r13=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000100)=r13)
close(0xffffffffffffffff)
ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000140))

07:52:07 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff0300000000000f214146120281ffff"], 0x20}}, 0x0)

07:52:07 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800ffff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:07 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='systemkeyring/+!{-ppp1\x00'}, 0x10)

07:52:07 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x20000227, 0x0)

07:52:07 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0xc0a, r0)
r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r6, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = fcntl$dupfd(r7, 0x0, r7)
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80)
io_setup(0x80000001, &(0x7f00000001c0)=<r9=>0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = fcntl$dupfd(r10, 0x0, r10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r11, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r11, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r12 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0)
r13 = socket$inet(0x2, 0x4000000805, 0x0)
r14 = socket$inet_sctp(0x2, 0x5, 0x84)
r15 = dup3(r13, r14, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r15, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r14, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r16=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r15, 0x84, 0x7a, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000)
r17 = socket$inet(0x2, 0x4000000805, 0x0)
r18 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r17, r18, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r18, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r18, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r18, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r19 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001680)='/selinux/enforce\x00', 0x80, 0x0)
r20 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r21 = fcntl$dupfd(r20, 0x0, r20)
getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r21, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r21, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
io_submit(r9, 0x4, &(0x7f00000017c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r2, &(0x7f00000004c0)="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", 0x1000, 0x200, 0x0, 0x2, r11}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x401, r12, &(0x7f00000014c0)="88bb8620b830c736b1f30f9f41ca6aee5cbddee4598f2883c296e30108074930903de4159d39d024a18977c9920bc3300c35df567f5ad26f8d26f6fca068f6fd5e8149afa8be5f43aed2fc8bdb8aec605eea0e916ea25b3e08069ee7deac2867fba0dfe4f8538820ff44fcf98f1fd3a49193cdf2395f3b2ed2788c4df094221779532b560134876e68ec8a57a6082827835db77892ac22602a563e151daaef7cb79307a904deeca1a6ef252dae88a7dd9830eb1bb88c", 0xb6, 0x8, 0x0, 0x0, r15}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x8, r18, &(0x7f0000001580)="4c2c44bbe6c827d79411657e1b3694b95d932aa622d38821bc03faae04ee6f246d4a6308cf135463e6f4dc5bf6f2056d15c1e2d735f18d23b38e173ce5fe46ecde1b21d70b26c6a42c8d16caa2b594b4bc20c95f656b7b9dde34a7e20dde9d56fef3e0d5781bfa8b54b4c53bc2604b4c19b06ec143348cc5d516710885f8a046b5affe65eb47f8101f1e155cd58cd091ec2a56c32d5e587999143d576d3d28a30c99dba4342579ad099dcf180b7e7c1c53273c95ad75bc4392d0edfbcbb18b3d84069b32f4565682bea590", 0xcb, 0x3, 0x0, 0xda9a880f610caad7, r19}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x1ff, 0xffffffffffffffff, &(0x7f0000001700)="5ee85c9fea95163b7952500af739a53d56962accd61165e9146deab908242dfcec7555772f5367be47695d435226c5c9eed689fa7822372024ed44ebdeb338c6b06c59b9a3f90895aec629b7aad9f231fd60d0e24d8d5aab80a773ae5bd62867212ec901b8038954800473296c2a8ae454b96b31121f1946fe", 0x79, 0x1f, 0x0, 0x0, r21}])
r22 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r23 = socket$inet(0x2, 0x4000000805, 0x0)
r24 = socket$inet_sctp(0x2, 0x5, 0x84)
r25 = dup3(r23, r24, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r24, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r25, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r24, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r24, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r26=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r25, 0x84, 0x7a, &(0x7f000059aff8)={r26}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r22, 0x84, 0x0, &(0x7f0000000040)={r26, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r22, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xffffffffffffffcb)
bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0x10000, 0x0, [0x2, 0x80000000, 0x7fffffff, 0xdfb, 0x3, 0x3, 0x8, 0x4]})
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r27 = socket$inet(0x2, 0x4000000805, 0x0)
r28 = socket$inet_sctp(0x2, 0x5, 0x84)
r29 = dup3(r27, r28, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r28, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r29, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r28, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r28, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r30=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r29, 0x84, 0x7a, &(0x7f000059aff8)={r30}, &(0x7f000034f000)=0x2059b000)
mknodat(r29, &(0x7f0000000000)='./file0\x00', 0x10, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:07 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x356}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:07 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x3, 0x4)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @default, @null]}, 0x48)
socket$l2tp(0x18, 0x1, 0x1)
close(r2)

07:52:07 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000680)=0x101)
r4 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
r6 = getgid()
mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x30, &(0x7f0000000540)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@smackfsdef={'smackfsdef', 0x3d, 'keyring{:security/bdevwlan0'}}, {@uid_eq={'uid'}}, {@dont_hash='dont_hash'}]}})
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="0245a039a7f0864f1006ce9352d3e328d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10, 0x1}, &(0x7f000034f000)=0xffffffffffffff28)
ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f00000000c0)={0x4b5, "7fee377fa166f0451c267bd918bb49781da5e5637dafca9f922e1f56d39bd3ef", 0x20, 0x4, 0x6, 0x8, 0x3})
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x2, {{0x2, 0x4e24, @broadcast}}, 0x0, 0x4, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @multicast1}}]}, 0x290)
socket(0x9, 0xa, 0x1f)

07:52:07 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000010214146120281ffff"], 0x20}}, 0x0)

07:52:07 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:07 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x6, 0xe2, 0x1f, 0x9}, {0xfff, 0x1, 0x40, 0x7}, {0xef70, 0x2, 0x3f, 0x8}, {0x26, 0x40, 0x20, 0x8}, {0x7, 0xd1, 0x5, 0x1}, {0xff, 0x80, 0x7, 0x6}]}, 0x10)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x80, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x9, 0x100000, 0x400, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)

07:52:07 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000080088a8", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:07 executing program 0:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x76ad63df75538066, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/snapshot\x00', 0xdc855a1146c9688b, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000900)='lp\x00', 0x3)
r3 = fcntl$dupfd(r1, 0x0, r1)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r4, 0x108, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xde73}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x80)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
fallocate(r3, 0x1, 0x9, 0xffffffffffff0001)

07:52:07 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x7d, 0x1, {0x0, 0x60, 0x2, 0xffffffff, {0x8, 0x4, 0x4}, 0x200000, 0x8, 0x7, 0x6, 0x1, ']', 0x0, '', 0x27, 'ppp0vboxnet1posix_acl_access{cgroupproc', 0x5, 'self#'}}, 0x67)
close(r0)

07:52:07 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:08 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:08 executing program 0:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q', r0}, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0xffffffffffffffff)

07:52:08 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @netrom, 0x11}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose, @null, @default]}, 0x8)
close(r0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000280)={{0x0, 0x7}, {0x11, 0x5}, 0xfffffff7, 0x1, 0x4})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r11=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r11}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r11, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={<r12=>r11, @in6={{0xa, 0x4e24, 0x67, @remote, 0x6}}, 0x62, 0x5}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r12, 0x4, 0x637502adcf90b781, 0xfffffffffffffffe, 0x7ff}, &(0x7f0000000200)=0x18)

07:52:08 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000060214146120281ffff"], 0x20}}, 0x0)

07:52:08 executing program 0:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:08 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x401, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/24, 0x18, 0x8)

07:52:08 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000080000f0", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:08 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="98ebe2a8c78415a4a6b15006bbe45dcc1b729833339ac716cf37723d13046bfaa1206a428607779ca82b554b878327ad04284f6dd3d69276b6392d2e4347a6a8e59009445c98d3c0eacf1691c259f63dd0a364f77ac98a1118297c6b2609c37e0c34736e01fcdeb785b889c923fb5ad20a0b8267eb03dc5cd657b9322fbae4635d5c0fd4db76d543d6393d2249695f6130a8d738aad1abb7d175a5d9108001631773e219bbafc199fef5fd2b384299e38f15be61f4e7b80b54ddb2ad66f323a33db05ca5a36f98e005f157b0163ef77186e4db59b712e317ed57", 0xda}, {&(0x7f0000000100), 0x19c}, {&(0x7f0000000140)="ebe50bf030998dd85b38", 0xa}], 0x3}}, {{&(0x7f0000000280)=@ll={0x11, 0xf7, r4, 0x1, 0xe2, 0x6, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="21fab03c8ca96b9a4d3610639e1bf5a1ea296701a8f7c11fded84a", 0x1b}, {&(0x7f0000000300)="ed38e541d4720cb090286d1f246b33382459e0cbf6e392", 0x17}, {&(0x7f0000000340)="aa063a339d44b46042d31245677e8747285969f7daca53ee", 0x18}], 0x3, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x2034}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x80000002}}], 0x78}}], 0x2, 0x404c000)

07:52:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r6, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={<r7=>r6, 0x4, 0x0, 0x7, 0x200}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x8}, &(0x7f0000000240)=0x8)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:08 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0)
getsockopt$llc_int(r0, 0x10c, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

[ 3237.632717] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
07:52:08 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3237.730412] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
07:52:08 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120381ffff"], 0x20}}, 0x0)

07:52:08 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r5=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r5, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r7, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r7, 0x0, 0x1}, &(0x7f00000001c0)=0xc)
close(r0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x202000, 0x0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc28280, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, &(0x7f0000000040)=""/237)

07:52:08 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
read$char_usb(r1, &(0x7f0000000000)=""/107, 0x6b)

07:52:08 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:08 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="024552704561d56326d32dbd118ca7230a9ca6c32afad8fc886326f1e8e2504ba72a78f8422a88cb7f651e14cd474eb3b064c6c78af76427cab72b30558fcb6c9f0dcd68a0fc0a74c0f85bffa471d507bfe5485e3257df8c48d238b2b5ac796d2e035f6fbb7f27f91742c19770fe2fcfc346d641e03209c80bce8acb70efd3ee5fb7330a167ee9448bb2e11166c717f3d2bbe815", @ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3)
pread64(r2, &(0x7f0000000200)=""/39, 0x27, 0x5f8b)

07:52:08 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r2 = dup2(r1, 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xb2, 0x7f}, 0x10)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r3, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r3)

07:52:08 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008007fff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:09 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0xf}}, 0x0)

07:52:09 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xfffffffffffffe5d)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r3)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r3, r4, 0xee00}, 0xc)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)
close(r0)

07:52:09 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:09 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @null, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff000000164000002bbd7000fddbdf2500000000"], 0xfffffffffffffe4b}, 0x1, 0x0, 0x0, 0x4c041}, 0x200000a2)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000440))
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180))
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x5c, 0x7f, 0x6, 0x8}})
close(r0)

07:52:09 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x9)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r2, &(0x7f0000000280)=""/224, 0xe0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x9, 0xc0, 0x1ff, 0x7fff, 0x5, 0x1, 0x5, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x4, 0x6, 0x2, 0x6}}, &(0x7f0000000100)=0xb0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)

07:52:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r4, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r11, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r12=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000)
ioctl$DRM_IOCTL_AGP_ALLOC(r11, 0xc0206434, &(0x7f0000000180)={0x5, <r13=>0x0, 0x0, 0x80})
ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f0000000280)={0xffff, r13, 0x1, 0x16})
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={r4, 0xcc, "066318ac032dfcda4c0ec10f79ed142723db72a5f0b8924985ecca83ab4c84188336d07af84563cd7e421a945f737d9ed19b8797e4a401e4ced09be1faa3d9d24cde33bc023661be5fbecb74e864d52905cdb48c36f36516e35317df2617c4f9b33b8520ab741d7e5f3f29032ab5f73c907e3a3c1810dbcbdeea14537a9a711729dc004ea83e907cb3758821fa0a32f764366aa2bb4f0da5bbcd86d735a1b876f6918053908672a9d71f0e2a292fd68405af137158f2e239bf0b64d52a43a2920b572065fc354d956d1d89d1"}, &(0x7f0000000140)=0xd4)

07:52:09 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:09 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x80)
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="4468247c04e0df88d3bea0e303e339c5f2202aed5a3831279830017ec29f8c2150ef71cd8bb68526d62517bd775bef4cfc183a4bb8d19810e6ef5b6b261299f83e09ab86821a7a7d8467f84b135d89e2fe5d7a3720109bb1c7a79f2ddbff75ad5ba396968a47fef8a1ec8fc8c8cf12527eab08888d5261108b4f7b8a0f2b3976cf73", 0x82, 0x0, &(0x7f0000000780)={0x11, 0xf5, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000100)=""/149, 0x207a0cb3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:09 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6, 0x6, [0x0, 0x1ff, 0x3]}})

07:52:09 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008009eff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:09 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:09 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x10}}, 0x0)

07:52:09 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r2 = accept$ax25(r1, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @rose, @remote, @rose, @default, @netrom, @null, @rose]}, &(0x7f0000000080)=0x48)
getpeername$ax25(r2, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @remote, @rose, @remote, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r3, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r3)

07:52:09 executing program 0:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="004526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='eth0/vboxnet1}}\x00', r6}, 0xffffffda)

07:52:09 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:09 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose, @default, @default]}, 0x48)
close(0xffffffffffffffff)

07:52:10 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xce86)

[ 3239.134377] net_ratelimit: 14 callbacks suppressed
[ 3239.134384] protocol 88fb is buggy, dev hsr_slave_0
[ 3239.144603] protocol 88fb is buggy, dev hsr_slave_1
[ 3239.149760] protocol 88fb is buggy, dev hsr_slave_0
[ 3239.154976] protocol 88fb is buggy, dev hsr_slave_1
07:52:10 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x50c}, "ffa6bd34f9a27763", "20d9ea5ff189c01f319651e29bb8be5a", "c2496650", "ce5bd39ef892aa74"}, 0x28)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:10 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@bcast, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)

07:52:10 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:10 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x12}}, 0x0)

07:52:10 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000100)=0xff, 0x4)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r4 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x800)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r6, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r6, 0xba0, 0x0, 0x6a9d, 0x7c00000000000000}, &(0x7f00000000c0)=0x18)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r8, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r10, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0xfae, 0x10008, 0x1, 0x94, r10}, 0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r8, 0x6}, &(0x7f0000000200)=0x8)

07:52:10 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800f0ff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:10 executing program 0:
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
ioctl(r0, 0x2, &(0x7f0000000000)="36275da0e8d7e9306936e6e68cc09082ba01ae715b79c4d4cc436d925ec7acc7a5e9a43e5f6c605137b0613b2194c6d48271203383377bc19573b268eadfe8ba401dc970463c53b99bcfb0d1d9ce277370502ca251c2bcb34d0cf5998194cc287d6822748b5e223effb84d8032bfa722ec289b67d427fd20fa5b5b58313ac01f324f39cad366dad61540086040f2bb8a21d39c71d2e57830b77a543d97befb6b6b98834326ef19ab5c87096d4af5c05d25d47348be5954a15174d099143da22ac412ce8baeb9f382a99a470b85a5bd97946e360778edb5a1d1c93ab38c038e2a7c54")
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev, @bcast, 0x1, @default}, &(0x7f0000000140)=0x1c, 0xc0000)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0))

07:52:10 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:10 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff624, 0x1)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/63)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)

07:52:10 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0xc0}}, 0x0)

07:52:10 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:10 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:11 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0xec0}}, 0x0)

07:52:11 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000013c0)={0xffffffffffffffff, 0x0, 0x200, 0x2, 0x1})
r4 = getegid()
syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x3, &(0x7f0000001340)=[{&(0x7f0000000240)="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", 0x1000, 0x4}, {&(0x7f0000001240)="dc043aa06ca95106fb5c73e27c4bce6a47fc68f74b2ce3fdb485ecfde3c79c9df042fad62ae4e595e9251009799677a8ec2c630ea98ec83580d20b", 0x3b}, {&(0x7f0000001280)="a49a74107d46cf75a7735cf7324cb786f5b868430c42c70d69affebd0177435c79db4c6dc68da6a42ec487e31a6538711cbede9ad6018b8312d24d315c6d3d0496227fcd4c4ee39174ba3f1bb5810ef287cc3da0bc43df2377b58c65677170543d1b64c23cd87fae06cd96f021f2af37523198c85398938861d4376516958e0a2d0cd38134563bc8eda94c23db9f9bdb85f6ffcccb796b1dff8852c607065ec772b2077934313b183e2ea68191ed2696f7bdee3eff211578b680b0cb355ca5", 0xbf, 0x1f}], 0x80, &(0x7f0000001500)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303333202c747900000000bbd84d230f13931ca77d98e6dc572c706172743d3078303030303030303030303030303330382c70617274bd3078303030303030303030303030303536362c63726561746f72298d5ab47a2c6769643d8e9fd21c10746c2287e0e573f95a8901c35927ff76135e64db07388a140421a4290df79fbba3459ef4ba756b0e254dbe30fa5b3dbb60dceded04d66d7ed9d250ff1aef5751cb0a9e43a720df76312767a20a0169451cfd276ee5f2fb7e1510e836bafb5a772e1e99c4d9b55353fb115cf2afb550b500", @ANYRESHEX=r4, @ANYBLOB=',measure,\x00'])
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r5, &(0x7f0000000200)=""/39, 0x27, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xcae, 0x8, 0x6, 0x6}, {0x4, 0x97, 0x6, 0x2321}]})

07:52:11 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:11 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800ffff", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3240.563117] hfsplus: unable to parse mount options
07:52:11 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:11 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x33fe0}}, 0x0)

[ 3240.894401] protocol 88fb is buggy, dev hsr_slave_0
[ 3240.894466] protocol 88fb is buggy, dev hsr_slave_0
[ 3240.899536] protocol 88fb is buggy, dev hsr_slave_1
[ 3240.904570] protocol 88fb is buggy, dev hsr_slave_1
07:52:11 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:11 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
r4 = gettid()
fstat(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = fcntl$dupfd(r10, 0x0, r10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r11, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r11, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r12 = fcntl$getown(r11, 0x9)
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r15=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='gif=', @ANYRESHEX=r15])
r16 = syz_open_dev$evdev(&(0x7f0000001ac0)='/dev/input/event#\x00', 0x329, 0x0)
r17 = accept4$ax25(0xffffffffffffffff, &(0x7f0000001b00)={{0x3, @netrom}, [@default, @null, @remote, @rose, @netrom, @remote, @remote, @rose]}, &(0x7f0000001b80)=0x48, 0x800)
r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r18, 0x0, r18)
r19 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r20 = socket$inet(0x2, 0x4000000805, 0x0)
r21 = socket$inet_sctp(0x2, 0x5, 0x84)
r22 = dup3(r20, r21, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r21, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r22, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r21, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r21, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r23=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r22, 0x84, 0x7a, &(0x7f000059aff8)={r23}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r19, 0x84, 0x0, &(0x7f0000000040)={r23, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r24 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r25 = fcntl$dupfd(r24, 0x0, r24)
getsockopt$inet6_IPV6_IPSEC_POLICY(r25, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r25, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r25, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r26 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xa38}}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x5, 0xffffffe1}, {0xb, 0x8}, {0x9, 0x3}, {0x1, 0x20}]}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0xa, 0x226}]}]}, {0x0, [0x30, 0x30, 0x8e, 0x2e]}}, &(0x7f0000002080)=""/201, 0x7e, 0xc9}, 0x20)
r27 = socket$inet(0x2, 0x4000000805, 0x0)
r28 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r27, r28, 0x0)
r29 = dup(r27)
r30 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0), &(0x7f0000002200)=0xe, 0xc0800)
r31 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r31, 0x0, r31)
r32 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r33 = socket$inet(0x2, 0x4000000805, 0x0)
r34 = socket$inet_sctp(0x2, 0x5, 0x84)
r35 = dup3(r33, r34, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r34, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r35, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r34, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r34, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r36=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r35, 0x84, 0x7a, &(0x7f000059aff8)={r36}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r32, 0x84, 0x0, &(0x7f0000000040)={r36, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r37 = epoll_create(0x400)
r38 = socket$inet(0x2, 0x4000000805, 0x0)
r39 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r38, r39, 0x0)
r40 = socket$inet(0x2, 0x4000000805, 0x0)
r41 = socket$inet_sctp(0x2, 0x5, 0x84)
r42 = dup3(r40, r41, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r41, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r42, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r41, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r41, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r43=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r42, 0x84, 0x7a, &(0x7f000059aff8)={r43}, &(0x7f000034f000)=0x2059b000)
r44 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000002240)='/proc/self/attr/current\x00', 0x2, 0x0)
r45 = openat$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0xcaaf094a672a8bf0, 0x0)
r46 = socket$vsock_dgram(0x28, 0x2, 0x0)
r47 = gettid()
ptrace$setopts(0x4206, r47, 0x0, 0x0)
tkill(r47, 0x38)
ptrace$cont(0x18, r47, 0x0, 0x0)
ptrace$setregs(0xd, r47, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r47, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, <r48=>0x0})
r49 = socket(0x2000000000000021, 0x0, 0x0)
getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r50=>0x0}, &(0x7f00000001c0)=0xfffffffffffffe96)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r50])
r51 = socket$inet(0x2, 0x4000000805, 0x0)
r52 = socket$inet_sctp(0x2, 0x5, 0x84)
r53 = dup3(r51, r52, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r52, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r53, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r52, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r52, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r54=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r53, 0x84, 0x7a, &(0x7f000059aff8)={r54}, &(0x7f000034f000)=0x2059b000)
r55 = openat$cgroup(r53, &(0x7f0000002bc0)='syz0\x00', 0x200002, 0x0)
r56 = fanotify_init(0x4, 0x80000)
r57 = socket$tipc(0x1e, 0x0, 0x0)
r58 = socket$inet(0x2, 0x4000000805, 0x0)
r59 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r58, r59, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r59, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r59, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r59, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r60 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/autofs\x00', 0x200, 0x0)
r61 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r62 = socket$inet(0x2, 0x4000000805, 0x0)
r63 = socket$inet_sctp(0x2, 0x5, 0x84)
r64 = dup3(r62, r63, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r63, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r64, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r63, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r63, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r65=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r64, 0x84, 0x7a, &(0x7f000059aff8)={r65}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r61, 0x84, 0x0, &(0x7f0000000040)={r65, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r66 = socket$inet(0x2, 0x4000000805, 0x0)
r67 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r66, r67, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r67, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r67, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r67, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r68 = socket$inet(0x2, 0x4000000805, 0x0)
r69 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r68, r69, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r69, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r69, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r69, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r70 = signalfd4(r69, &(0x7f0000002c40)={0x6}, 0x8, 0x40000)
r71 = socket$inet(0x2, 0x4000000805, 0x0)
r72 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r71, r72, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r72, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r72, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r72, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r73 = socket$isdn(0x22, 0x3, 0x2)
r74 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/video37\x00', 0x2, 0x0)
r75 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r75, 0x0, r75)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002e80)=<r76=>0x0)
r77 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r78 = fcntl$dupfd(r77, 0x0, r77)
getsockopt$inet6_IPV6_IPSEC_POLICY(r78, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r79=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r80=>0x0})
setreuid(r79, r80)
r81 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r82=>0x0}, &(0x7f0000000240)=0xc)
setresgid(r82, 0x0, 0x0)
r83 = socket$inet(0x2, 0x4000000805, 0x0)
r84 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r83, r84, 0x0)
r85 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r86 = fcntl$dupfd(r85, 0x0, r85)
getsockopt$inet6_IPV6_IPSEC_POLICY(r86, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r86, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r86, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r87 = syz_open_dev$cec(&(0x7f0000002ec0)='/dev/cec#\x00', 0x0, 0x2)
r88 = socket$inet(0x2, 0x4000000805, 0x0)
r89 = socket$inet_sctp(0x2, 0x5, 0x84)
r90 = dup3(r88, r89, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r89, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r90, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r89, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r89, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r91=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r90, 0x84, 0x7a, &(0x7f000059aff8)={r91}, &(0x7f000034f000)=0x2059b000)
r92 = ioctl$TIOCGPTPEER(r90, 0x5441, 0x0)
r93 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r94 = fcntl$dupfd(r93, 0x0, r93)
getsockopt$inet6_IPV6_IPSEC_POLICY(r94, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r94, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r94, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r95 = socket$inet(0x2, 0x4000000805, 0x0)
r96 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r95, r96, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r96, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r96, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r96, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r97 = socket$inet(0x2, 0x4000000805, 0x0)
r98 = socket$inet_sctp(0x2, 0x5, 0x84)
r99 = dup3(r97, r98, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r98, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r99, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r98, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r98, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r100=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r99, 0x84, 0x7a, &(0x7f000059aff8)={r100}, &(0x7f000034f000)=0x2059b000)
r101 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r102 = openat$dir(0xffffffffffffff9c, &(0x7f0000002f00)='./file0\x00', 0x420000, 0x212)
r103 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003080)={&(0x7f0000002f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@union={0xb, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x3, 0x5}]}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000002fc0)=""/173, 0x4f, 0xad, 0x1}, 0x20)
r104 = openat$vhci(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/vhci\x00', 0x1)
r105 = creat(&(0x7f0000003100)='./file0\x00', 0x100)
r106 = socket$inet(0x2, 0x4000000805, 0x0)
r107 = socket$inet_sctp(0x2, 0x5, 0x84)
r108 = dup3(r106, r107, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r107, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r108, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r107, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r107, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r109=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r108, 0x84, 0x7a, &(0x7f000059aff8)={r109}, &(0x7f000034f000)=0x2059b000)
ioctl$TIOCGPGRP(r108, 0x540f, &(0x7f0000003140)=<r110=>0x0)
lstat(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, <r111=>0x0})
r112 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r112, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r113=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='gif=', @ANYRESHEX=r113])
r114 = syz_open_dev$sndpcmp(&(0x7f00000057c0)='/dev/snd/pcmC#D#p\x00', 0x100, 0x4000)
r115 = socket$inet(0x2, 0x4000000805, 0x0)
r116 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r115, r116, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r116, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r116, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r116, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r117 = open$dir(&(0x7f0000005980)='./file0\x00', 0x1, 0xa)
r118 = socket$inet6_udplite(0xa, 0x2, 0x88)
r119 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r120 = fcntl$dupfd(r119, 0x0, r119)
getsockopt$inet6_IPV6_IPSEC_POLICY(r120, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r120, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r120, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r121 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000059c0)='memory.events\x00', 0x0, 0x0)
r122 = syz_open_dev$ndb(&(0x7f0000005a00)='/dev/nbd#\x00', 0x0, 0x2)
r123 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005a40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r124 = socket$inet(0x2, 0x4000000805, 0x0)
r125 = socket$inet_sctp(0x2, 0x5, 0x84)
r126 = dup3(r124, r125, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r125, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r126, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r125, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r125, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r127=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r126, 0x84, 0x7a, &(0x7f000059aff8)={r127}, &(0x7f000034f000)=0x2059b000)
r128 = bpf$MAP_CREATE(0x0, &(0x7f0000005a80)={0x5, 0x1f, 0x1, 0x6, 0x0, r126, 0xdb, [], 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x3c)
r129 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r130 = socket$inet(0x2, 0x4000000805, 0x0)
r131 = socket$inet_sctp(0x2, 0x5, 0x84)
r132 = dup3(r130, r131, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r131, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r132, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r131, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r131, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r133=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r132, 0x84, 0x7a, &(0x7f000059aff8)={r133}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r129, 0x84, 0x0, &(0x7f0000000040)={r133, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r134 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000005ac0)='/selinux/access\x00', 0x2, 0x0)
r135 = openat$tun(0xffffffffffffff9c, &(0x7f0000005b00)='/dev/net/tun\x00', 0x101000, 0x0)
r136 = syz_open_dev$ndb(&(0x7f0000005b40)='/dev/nbd#\x00', 0x0, 0x440)
r137 = socket$inet(0x2, 0x4000000805, 0x0)
r138 = socket$inet_sctp(0x2, 0x5, 0x84)
r139 = dup3(r137, r138, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r138, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r139, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r138, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r138, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r140=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r139, 0x84, 0x7a, &(0x7f000059aff8)={r140}, &(0x7f000034f000)=0x2059b000)
r141 = ioctl$NS_GET_PARENT(r139, 0xb702, 0x0)
r142 = syz_open_dev$radio(&(0x7f0000005b80)='/dev/radio#\x00', 0x3, 0x2)
r143 = gettid()
ptrace$setopts(0x4206, r143, 0x0, 0x0)
tkill(r143, 0x38)
ptrace$cont(0x18, r143, 0x0, 0x0)
ptrace$setregs(0xd, r143, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r143, 0x0, 0x0)
r144 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r145 = fcntl$dupfd(r144, 0x0, r144)
getsockopt$inet6_IPV6_IPSEC_POLICY(r145, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r145, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r145, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005c00)={r143, <r146=>r145, 0x0, 0x5, &(0x7f0000005bc0)='ext4\x00'}, 0x30)
r147 = socket$inet(0x2, 0x4000000805, 0x0)
r148 = socket$inet_sctp(0x2, 0x5, 0x84)
r149 = dup3(r147, r148, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r148, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r149, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r148, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r148, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r150=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r149, 0x84, 0x7a, &(0x7f000059aff8)={r150}, &(0x7f000034f000)=0x2059b000)
r151 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/fuse\x00', 0x2, 0x0)
r152 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r153 = fcntl$dupfd(r152, 0x0, r152)
getsockopt$inet6_IPV6_IPSEC_POLICY(r153, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r153, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r153, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TIOCGPGRP(r153, 0x540f, &(0x7f0000005c80)=<r154=>0x0)
r155 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r156 = fcntl$dupfd(r155, 0x0, r155)
getsockopt$inet6_IPV6_IPSEC_POLICY(r156, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r157=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r158=>0x0})
setreuid(r157, r158)
r159 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r159, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r160=>0x0}, &(0x7f0000000240)=0xc)
setresgid(r160, 0x0, 0x0)
r161 = gettid()
ptrace$setopts(0x4206, r161, 0x0, 0x0)
tkill(r161, 0x38)
ptrace$cont(0x18, r161, 0x0, 0x0)
ptrace$setregs(0xd, r161, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r161, 0x0, 0x0)
r162 = getuid()
fstat(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r163=>0x0})
r164 = socket$inet(0x2, 0x4000000805, 0x0)
r165 = socket$inet_sctp(0x2, 0x5, 0x84)
r166 = dup3(r164, r165, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r165, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r166, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r165, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r165, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r167=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r166, 0x84, 0x7a, &(0x7f000059aff8)={r167}, &(0x7f000034f000)=0x2059b000)
ioctl$TIOCGPGRP(r166, 0x540f, &(0x7f0000005d40)=<r168=>0x0)
r169 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r170 = fcntl$dupfd(r169, 0x0, r169)
getsockopt$inet6_IPV6_IPSEC_POLICY(r170, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r171=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r172=>0x0})
setreuid(r171, r172)
r173 = getgid()
r174 = gettid()
r175 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r175, 0x0, r175)
fstat(r175, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, <r176=>0x0})
r177 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r177, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r178=>0x0}, &(0x7f0000000240)=0xc)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='gif=', @ANYRESHEX=r178])
r179 = socket$inet(0x2, 0x4000000805, 0x0)
r180 = socket$inet_sctp(0x2, 0x5, 0x84)
r181 = dup3(r179, r180, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r180, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r181, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r180, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r180, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r182=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r181, 0x84, 0x7a, &(0x7f000059aff8)={r182}, &(0x7f000034f000)=0x2059b000)
r183 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r183, 0x0, r183)
r184 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000006280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r185 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r186 = fcntl$dupfd(r185, 0x0, r185)
getsockopt$inet6_IPV6_IPSEC_POLICY(r186, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r186, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r186, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r187 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000062c0)='/selinux/policy\x00', 0x0, 0x0)
r188 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r188)
r189 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r190 = fcntl$dupfd(r189, 0x0, r189)
getsockopt$inet6_IPV6_IPSEC_POLICY(r190, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r191=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r192=>0x0})
setreuid(r191, r192)
r193 = getegid()
r194 = socket$inet(0x2, 0x4000000805, 0x0)
r195 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r194, r195, 0x0)
r196 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r197 = socket$inet(0x2, 0x4000000805, 0x0)
r198 = socket$inet_sctp(0x2, 0x5, 0x84)
r199 = dup3(r197, r198, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r198, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r199, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r198, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r198, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r200=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r199, 0x84, 0x7a, &(0x7f000059aff8)={r200}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r196, 0x84, 0x0, &(0x7f0000000040)={r200, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r201 = openat$ion(0xffffffffffffff9c, &(0x7f0000006300)='/dev/ion\x00', 0x1000, 0x0)
r202 = socket$caif_seqpacket(0x25, 0x5, 0x5)
r203 = socket$inet(0x2, 0x4000000805, 0x0)
r204 = socket$inet_sctp(0x2, 0x5, 0x84)
r205 = dup3(r203, r204, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r204, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r205, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r204, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r204, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r206=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r205, 0x84, 0x7a, &(0x7f000059aff8)={r206}, &(0x7f000034f000)=0x2059b000)
r207 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r208 = socket$inet(0x2, 0x4000000805, 0x0)
r209 = socket$inet_sctp(0x2, 0x5, 0x84)
r210 = dup3(r208, r209, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r209, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r210, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r209, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r209, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r211=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r210, 0x84, 0x7a, &(0x7f000059aff8)={r211}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r207, 0x84, 0x0, &(0x7f0000000040)={r211, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006340)=<r212=>0x0)
r213 = getuid()
r214 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r214, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r215=>0x0}, &(0x7f0000000240)=0xc)
setresgid(r215, 0x0, 0x0)
r216 = socket$inet(0x2, 0x4000000805, 0x0)
r217 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r216, r217, 0x0)
r218 = syz_open_dev$midi(&(0x7f0000006380)='/dev/midi#\x00', 0x40, 0x200)
r219 = socket$bt_hidp(0x1f, 0x3, 0x6)
r220 = accept$netrom(0xffffffffffffffff, &(0x7f00000063c0)={{}, [@netrom, @bcast, @null, @rose, @remote, @netrom, @rose, @null]}, &(0x7f0000006440)=0x48)
r221 = socket$inet(0x2, 0x4000000805, 0x0)
r222 = socket$inet_sctp(0x2, 0x5, 0x84)
r223 = dup3(r221, r222, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r222, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r223, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r222, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r222, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r224=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r223, 0x84, 0x7a, &(0x7f000059aff8)={r224}, &(0x7f000034f000)=0x2059b000)
r225 = accept4$inet6(r223, &(0x7f0000006480)={0xa, 0x0, 0x0, @local}, &(0x7f00000064c0)=0x1c, 0x1800)
r226 = inotify_init()
r227 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r228 = fcntl$dupfd(r227, 0x0, r227)
getsockopt$inet6_IPV6_IPSEC_POLICY(r228, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r228, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r228, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r229 = epoll_create1(0x80000)
sendmmsg$unix(r2, &(0x7f0000006600)=[{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000480)="fff10b2c736982640616354119b40c6d4305b9d41cbdcfae1e77530d2e3cb16d8519c6a0009cc368af2f59a4788049c8b2533800f4cdc9fa3ddc50c556d6e0ed8a23cb9270d676f3a7451d9892f0940e58e56928090fe30a138ce2c3e77b58c784fb4f45ab14d2df24f2b08f0fb951452ac7f9c507e75901e870215309acc103505b493da95cb55f34818c47ee091e9e4bcdf4184f9a3881a5a5d8007a5c32b79ae54f5a7c65a8bdb0e87b2c9eb7e2d62fd3502cc36b", 0xb6}, {&(0x7f0000000800)="ac18a74a1d4820a87db5dd72c770cdceb9bf4f7d05d801b64dceaf0b9cef476b92d637d576265a8ee53a2eed6d9be65da5e2b581122ff125878faa140690af4fee5a1984446200e9b85af09511577b0e5bb445afc4a511cc4baaafe5068506f75078399f9e6c18ee186cb2e018086b0d6528bbc1473b1d1718a05812b3ab022bd728f66a278f3a1eb41f9ad66b3a7c0b2e031526b9d72ce9a3f385e19c5e34a1487d5f288fe9583b70d4e6c9d1376f7bc384f3041ee3442e3177793671794ad5582d4fb229ee2af1890a3c716273acf3af88b365e3d4c46cd280cb7ebff77e702afa4b9d2684f62cb2de710e3abb1b89a2a417bcbc629caba6a710c6c095db8574a6262ccd9093fdea6c976d5c9cf4ed8c1b4620e05f4742ec7e9dfe54e04fdf78628540af4ea07dbcee54913396d490cb0397767228f9ef7d7c6989049aa42ab6154c7f36f32a4a5ec5d23e46be1ed8ed74659086127c6f27b6df6c334f8a5fc10b95aacfa59a22d4fdf63049134d07d7e8a61c775c3bd066a93f4487fe5f390e7c8fb7cef8a7e4755e2dac5ba0320f4924a6c9e42a60cfde9acd333d5a9a603147fbdcd66fd61ef5cf66ee6301644ad689961435fd2d5df545f0a3997f56e7cfd0b32fb58b685ef4d27815f9d929792ffca6cffbf2a17e2a8aff0a3b5db0894474df8945d15fe73865f1a1f4b29ec38ec38c3c3134dcdc95dae881f244cfa86b668c921583e798fbec522599a0bace3503b5df7d12bb5af7b0747fc75e84650fdf25f2e1e4afa38c2927fab3b314d06cbf518f5e4e996e72d43deecab53b7a68cc7df4a929c3de3fd8f8cf31c24b8ca5e3b403620d23fd9a8b893ebedbd6cbf195be83d8a7bbfa240528a7dd011d441f10889a82d05ce8f18309921f907fdfde0fbe1d42d1ea210a9597ace06e5c051cc3fda1e7c01e2e741f72333c0af0206963a9eb2ce4141829cf2fde8ab969f51577f7c081e73c22c8a4b56c746af9b5c2102934804deb45caa82509ab058dbb0f8a92fa6bd3a281fe4ce52bc0fc0500a22567ce5f3610559dc5616a44b768de8c599b986072ba03dabd468e002954e740edec1c2689704db07ba4bab861c0922c5e6aaa765ab1180f7422c49fe37512fc85b6dfcea80445653322d6f2745133eec24408c7a550822357a7e7f131243fcbb75c7714547b4b4de4e277a9e53fde1e80893a5645d46985509eb9640d47bf32cb0f8293f50b0e6a32f9e5dab3c863e638b59fe220e9a778c2037d872ce195a6a55037e8234d18d745153c29f4214ae3758530463cc1689d741e9c478598121a68433495110a7df3465eb8f15be3de94cff32ffda8543cce093c632d14182a00aa21c6661c0a111fbed4ff80c272d09e692ca091bc1d51ef09edad080b3f9c389e4260f312b717df2cf940ccf20b4f2548ef4bf8bf05efef6bf89ec5de189a26883671083790afd240acaa8f65742b70d702211a53e76592a01f3d3a0e498f63df8e2035dfb8a6eb878a1c9ec85da40fa255b2d16f262ecf643d5d34a3fd96a8cd4c8ad9278d89e714f99c9990f4b30357f48eacf03011263665d4bc788dab44ab139ebd3eddd055d87637591fdc7dc3e8ab8c944f5002bedeb2c1445f18d7420b2b968392c375d0a0bcb7319cfd4d54f834af868191c0ec1433dff1646f891661692f59091a01409643505f92113ef5cf6ca542b80fa5087c851c94c826d4735352ccd6b9a37841f7b119654a59373b8845a496c205fb942951f48fffa250df5c866f727cdd28e787b6cd1c64105b5f3640292111412b37515f354bbc1375b2cf341c2f0dd72fbf1f4982572ed42d111d49b759455a595387ad2015881b373b9a0c826e0599b10db8a9cb43c7ca581af5dafaf3d860b7f2d0b34a18a3c9ffca7670b4e8e2c5c4f331cf82159c818aef4365acfc942a68462ea2fac6ee7735a1ef741a171c3ee08dcaf01e367c0bba0aae5589f86f56ed45789d151bce32d90279c87a359994b636e1b5a4359593069a8714f33cd414e7cd7887aee956dbc805b16f480302cddfa4cf8cdcc531428e09a09bc0742e72a052df4fa85ea652440a0451009b4dc67ad802625fd05c2b0d0d28f335ecc0601b3b4575394546e0ffdd8bc02dc7e4dbdc40a9657ae8b04985c6658cccab33e47b9c0524fd53b4762bc3a36bd53a2c8f3472950a50902e9aa845a5fe32c58349a638fb8276977059d5d733e4b0d46456791728862de28759b9a0683a9d3f8b5789bbfa65b1d6826303f75c56ce0daaf03fe3eb107f3d24f2ee48bac16974eed2b42fecd094602d37a81326b56ee48c43fda9f3d932603a19e80ca3108e6dff81d081ac082a2d7f0c6e9999ce8b68b1154275cf953bdd7873417b572b99e95bc7641b733ee947322c3bd3e611ee1bca5dfcfcc715213ede09de20f93f1c393413f3150aa4485552dc86391d3e59fe52fec879c817a8c73b23162db591e64fec4f85598ac3a6bfe8346e1938bf77c7af3531bcf8fca6d5439335f8113b47af59a5c7f0748957df573a60e63094e6d5c6352511df56839064f36cfb2f49ad8e4ad297b1f7b29e18b6030efc9871d5eb68fc8a9dea14e7c1f0a8945e1cd77b73da60eaa2691c162d85d7391627d7ac1a1cb33e1072c88116e7ddc339378577e04ed6279142215b3c519aa5be7cd7f1764c1d91d4796f28c3355a48c65cdd0fb33ee597845713eebb7b72548218267f9407b18f882b784bf2f7d826637493c163c9680812281aaddfa7783db8ec0c147cae20bb95ebf65386c9bc1b7f39920d824533a42a9fc2db0fb613aace941357387714a0be0528dbc5600de6358ea637c8553f444117dd3277f9142690f530c67fe3a386660e2ff83c52efcef52d2cfc4bdc9602a943a6e6fdb10b99e6685a3e497d384a977d504e8821e5440081f00914486787046187b529e3a9fd704c2fe5fa54c4aa9a135782fb43c31036efcd5d954b8438d013235a2ea1f085201f4a9f604eb6a09408e404c7770a9d9ea2f483e0fe98504434701b368c12a167a40cc0a36f8348bc9b93b28ad7fadf4abdae9c75c0f2568d56f006981c0a327caa0cb27409b8fdc00b84f675143512bcbdb6650beb906c8aeedd4ece56fbcf83b942a16c53084cf423a857d2d296c0f87a5680024f6350a7667f5681be72d04135a7779ac643dc9704d12216289e204edf238157ba48964dc630555bd2cea77f03190fe8de97b513d652bbaaea3b8f7dbc8f19224647bef9a5f8772b688dc3b5071b47c7a9d893c9bf65e5c406902b92268493725d704d543cc5a6a165a81f613fdaee5b1311e14f1b0a4ff04dfad6b302327ed14ada1e355dba176b30b1dc49f666950dcb7c4030cdb9f89ec2d7e8965b66faf80516a7141e60c35c01d7f0cd3389ca4a1524aa2f9ab800802af80dd0b0529a0a750734406f3aac688de5f677bb929a05724a9040a23eb1f740b1684f53267f8cd4f45b67dc21b27b4c4d4b3a936ad081bf2aa0de5270f335ab1a3406083122f0427a9a8f157fe4a96c77543dcf6ccccc20e038c9168e438bdb06382c1f455bb5805ec733abf28c9e887d2138745fb788084ad0c1c512234d33f8321b13c57dd850e6aade2d8431622328f37c8ad00cc84302dca9f0f97f41e8840dfd47159e8dfa4e03328c9a749bd7b15ec0a67ebc0b87fe2e537c178b07ae4bddad0876a3449b5753f82c4e824804748acce3c9b26175d0402c6455f6695bfea70a75f2b271a4cd2684d7b3b6aaa95bbe50f199b077304fae24656de9e54246d872be3d9e13b19c290bb74fe2e42a27695a00954defcf20a14898f135f02c9e1ce5451928e589aa1ba364fd6c53e8c5d1879af286ce437589634be1e92985eaecee2e174acf190f6ed54e6ea780484c81d913c8d492738b373522c709bba34bc111ec6be28dbe776e8eb91d2660960e82e339d2b9656d7e1ed3b8a167a1d49b39dfefd96aa31874d4bf9f14e07948037beb5eb432d0e19ddbcd86855603f8e4216ed20ad35b2c93a94229467a3db3b8c642a4bfaf65d0d6e60703aeb09d3af7ff3de427d577531d4bf583d2735dd556cbe1c7175e81dc516b294be7f86d8494f1465bfdebf9a933cae525dc805ff71eb4ae26bcb95c493797e5e9bd77bd3ad5eee4d5850c0de87da4eaea0c0e4e8e61a7184dac99b12493eb441607402fdf00db6c8d7f6798c9ed55fe02af5d66a209e8124cda27f362c9dbe85d5c9b2e2bd15c2cee94eb8ce4ea8aa8c40e3deb0176b82077f9615ff3c33f098e4feed178561d312caed34a99a8cca670ce3097a199c37da3867154d74fb810cd6b156711fe5dd609b95e8d5ac8e5faf56a1db4ef1fd5cd49bf5a2acdb953262f924a8c947d09841d81a4754b7b2cf14c6a2ec37a4c21f0da9fd6f33b645dc0d16dd25644ebe4e687007430c3980991f9904d391a5c30749c9cb0ddc124df1108a61fa7560871dea744f0af68862f98ae7c4a1c9677107b1767c52ffb85ddbadea51d69e3041cfbc3c449b3aa4d6923805e594f6f989694639190940b17d020027613bd9a6c0fb08ef0f13509778b1792985044a369cdbf353fe1dc690a1aba54f918b86549135e05ff4ccbc1894db39c14064589e9224dc69e0c1bdb920ff015adf48031d9e9765d150c13fb1ccff759703418f9e2b01ec7799da26b3af16498a6bf5d36bd7f0996cc6cfafff3f31c0d39bffd2ce386f7c98f87a202e42c30dbde94a39fdc0e04e4938e743a3c8fa294d61292d915571d4cf113180182b14eb95626d20f3c5d0e5cbc2c956baaf317ddf7cd6864c7ce1eb84065e2aee26bc233613121d4543c204d073fc95295e47f26e92068aad2f3d093da15d14c4354b51e04804200b7e5e386eac2f2c3a5c8070159e2d021aa47c0ba732a1a8a90546dd231fb94476fd67abc3909e4b2570c54f375d4e913654dd6c7ed72cd8675a1d6ff8b05d4d995b028bc21398a1034f04096d55910d719f83a1bbf5b9603596e377013d2411a77cef7d2d3abf499807cf9fc23fc82e1d9f13723f7c730a6e761e5ff99a01319d44e3d9d2e126790c039f414f50c61661fd0cce4bdc0cec4dbdc5078a868eacf890f748cb51b6c8c8c8cf13f19c9951a57fc86fd46f382387a451df283a88be8f74783cb203cadc1cd29221de9eec86cd2b90195cd1104e523bac083f25edf67c19ed7d717cebfab94dc602c51162041aa2285e0a8310c83a6bc14117075b4e5b4561051384f614d7835a1204dc7fb8f22a8c0825cdefe5620659a75d4af27bc0690cfc12fa3edb294224efe206a16f078e373176d16ca09926915fb131d2af18544f51bb79cdb53b50e4f5349a79b4cea11c89082503410eeefcfe5b43e3d14f315bbff657305e36d7def95c96341d9b10c31896367b70c6aa17f7010e196eef1898027142cd1a832fff47e4fde447de694847d7e0b7b72ab7b8eee2dae71aa7a7dd5cb30898257118e78657fedf2d4f1d7d61298d0f7fe9b7ca19f339afa6f03cd5a9b0959ef9f08719e8e269ca16e99150efc69c2a7e8b232c1c8dc472486ecdc50ce02c810f7d83fc7fa43f08bc2edb968675eb9d0a3d7c4b83fc0f4b5fc4faf07196e1d6c49134851eb24024fca3cd1a302655050e4fec7eef7461fd637ec30047caff249a849384391433d14ee8b244910261152cf1e5656b02f413e6b2d98307b56366960ed118ffe1b7bc7fde556d8cf3189e81fa76b2c54d48ca85232cd97b2537413d9d9f5f028c8855fe75cb4d02f297ffd9637da5020915daab1b02cc86a9247190e18be94f544f9f5fc3cc7", 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}], 0x58, 0x24000800}, {&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001980)="65ff9d03fb73d4030701d981ffc93baac9e0d75a8e99b1511ed2819f58d102e3382210ddf65f4a8bbb2288f04d95c8cc0aac57503e05d8d5b1f6350c619fef281a75a5600d2d67fdc2a5ec6a1a164776d53bac59f9c3e4ef3fa174e068a52a91819c158c686bfde1f50bea98068ae980d7600fff78ad9df5dfd35eb4875d9292c4530706f0a7ab2f093aa94f62a3ee5bfa725870cfc4e72315b7cbaecc1cb46bd61454b5059d6a0f4e662daee0cc6fa64bf20398384fd549e9319fddc961b55f7d51b134cc6a85698c50b0733df5ac0555c6def1f91f12700d38b773763a811c73498b7e59322f346b", 0xe9}, {&(0x7f0000000780)}], 0x2, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [r16, r17, r18]}}], 0x20, 0x4008000}, {&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001c80)="468ee078c7b37937a63fb01dd86186d0e23181e81f760235b63835afe58c3a55ccb77c15bc30415ed516494c03e6d6c9f2fef769369c85fb139feaa8fa5bb3c2e206561197a522188e7adb64d085ef2fb7f1cdc143222273b43393a22b9e2ceb8a22e50186297d6ebc514ad03a9eedd338c1a4f57162637fbba985ea3ed3b52f5df0e22ccef7ddb25875c6b1dbb312575d572f2729b91b422c9e654954d48ff3419c318c4ba3a77ea7b71fbe", 0xac}, {&(0x7f0000001d40)="985e1bbe12fdc0d07cd78778ad26ac28c8408210c45ce6d2f5bb639e4f1f5d63e5f3d796418bc7e7e64bceebfc7abd34a6b4d7697adbfc2563b8a1cafe7d0854d86f6e2d711e93092f0eaf18c795ff53fcebccd5ce463b5b1c5f02440f8f644d32afd2d859f29db8f1", 0x69}, {&(0x7f0000001dc0)="251690a2655079435f619f18dd099b85efec3116d8a1a8c81204a173", 0x1c}, {&(0x7f0000001e00)="ab", 0x1}, {&(0x7f0000001e40)="f54b733b14a575a405343cc15e805f97b475f33ca96809d3cf05e8cb821d84b9df4628fcc2067e9d", 0x28}, {&(0x7f0000001e80)="5fa8511626ccd791319b3f8c1318f54fcf3a535ef6eca36b0b55d2671fbbd46a1f9551091e4fd2ad4cdfd15d733e350df6031e7653cc21c883caab6f315f4ece42aa8a0f", 0x44}, {&(0x7f0000001f00)="6d0e65cca579f7eb3a1595e3b122d48dbd957b43d59d6fe50264984ab9b1a80fb489c97d60b0dca61d54d3c044e74dfc359ab5f0b27c96aca004932bef71772cbd5d383a8d6d163ac3920321600ed0d462fa3a2059acdb42fd", 0x59}], 0x7, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [r19, r25]}}, @rights={{0x38, 0x1, 0x1, [r26, r29, r30, r31, 0xffffffffffffffff, 0xffffffffffffffff, r32, r37, r38, r42]}}, @rights={{0x1c, 0x1, 0x1, [r44, r45, r46]}}, @cred={{0x1c, 0x1, 0x2, {r47, r48, r50}}}], 0x90, 0x40a0}, {&(0x7f0000002400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002480)="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", 0xfd}, {&(0x7f0000002580)="68b85d9201de0bf2138456e6c1919ede8641236604a3e63f81763fcd5430d21d04e84080955fc4d4c6c0428364eb74284dd01d6a8b157cc667b0939f2696bef5d45df7971d38a010e68a180d37c83245f7b6efff48fdf9761478ee0a8a70b57d87f9e6af3f98e2d64c80c65bd6b84a7803073507b4c1e2bbf444b5726fcd4bab292c34ab3c4c11db24f2e02d39c1fd4989fecdf91e71726faadd141becf4968cdfa14c639783f7dd28212f8c8b55b2fe4cbb014405ee56de2a66724a34315ebddc00fb8f3afec1217814f32d7a5a0ad8f2cdcd8804654644dff174c9d231", 0xde}, {&(0x7f0000002680)="86754b4d0b8f6fd8f927cad6bb1283b95491cc9a433f4e5389c2c14850ecb42f79919b3524721d8cb18bf852f8307054f5e1185ba01c047bc7cc87f7e66b45f67bde8b0b728a9eacb014c4a091c3d3ff41b32aa268cc41c17e67e1ece2209e42090a62165666573f933c7e52141bb863a1badaf7d9cab2b25abdadd366c5ce0d6abf71cf400ef073ac2ee6c4468d5dd07a3f4980324d59575860cb26ce38124f82", 0xa1}, {&(0x7f0000002740)="b86c935900a6ea59cb03985f1a8881354311be579bceb3fecdbbc38f2424", 0x1e}, {&(0x7f0000002780)="a9b0350159b27aa23bd10fef69fe7b277563c209ce016866f5404c731752d2362fb32e465a4f5adbb17a8c40e807b14b063ce29f8cec6f3a00c520254cb7707e00edb32566cb00a442456fd3cfc40651b0158911b41a4a376da2bf8f8dc8a80c1cbd3d37962edfc1ce160b73a241f338a02da9f8e48f40f2431ae78fc27a5578c97a911aaa7af75e3904672428ef9ea44ef9e49a890c544c85a1eeb6c6208b232b004db2cb6fd96e8b7fc02a2cf7e84cd792aa0caf3f6976f28370c134bcb802ccde3709407e3f72444b1031d1c415b5808f66b27a83169664914510fbd4a84407131a9adbc5b69af685e36cec858a9b7ed344", 0xf3}, {&(0x7f0000002880)="8018c0d7f556b2a5b9d553f8486fa8067c3013b37a7e246c913e69bd29240be4232f1fc2cbf69ea9965efec2e48965a4bab3dff948827acc13b4f224f7e3b8c91ca686dba6c1ec2553c2272b2ec3cdc5ad6d8389c3ee1f6b28e2eeabcac74152c0963021e6bc366648fe2fd936b89e3f70fc36ba5dc0d392b7ffeb4724af82cb5f3d7eaa170602dc40b45a18419c255fea4bca35e8b518c7e09bbca86b05e37cabc3e1db8bdc6f76fb2e1327f20b645fc767cf3ff67f836063cb727e8a107314bfc523baf952c5611c5a696343", 0xcd}, {&(0x7f0000002980)="3799", 0x2}, {&(0x7f00000029c0)="52d9905cd40747a603903865aab73bc7eebddd369f532d407b771a15da6a63d3f93b9d3d7586c992827cc7a7d639388eedce03dbf1f3be66806bf2e19cd02479b030a97f84880652061d7c6c41ff211d3af0f3ad9f2edd6a580ad02bb08cef3d0a3f1edbe4b8561a45558b73f2c62e7c41f7998480484b249e", 0x79}, {&(0x7f0000002a40)="1f3fe5f62f43216865817ec6fd76cb93683113aee882645ed29323ac2479bcf5fb683f1050bab28ebe62f1e205ba07a6663d822d7513a6c8e7b21a8d7efedda611b80beb000eb32846f03cb8cd889599ea10eb5b346c8845e0886fced1d1e320ee0951ae5ba175c8ab439c39a626ae9635098fce83482c6d8089afb6203f52d58edc2e2d9b94b89abd87125b27c544f47bb4ced6", 0x94}], 0x9, &(0x7f0000002cc0)=[@rights={{0x30, 0x1, 0x1, [r55, r56, r57, r59, r60, r61, r67, r70]}}, @rights={{0x20, 0x1, 0x1, [r72, r73, r74, r75]}}], 0x50}, {&(0x7f0000002d40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002dc0)="6963adb3a0d0d593699b5849f27903838e34759cae977330412896ee6853f42c302d4e0f94c15ff47fbfa698745511fcaf372bcfa573dbbcfa17f39d8b78a80a7cafdd3a5f62942ea5aedb492bb487e02452533e7c6b4c94b285ef03ce2f1cf451908e9d5b6786a4acc43753eb87aa357c5a06ea6e63aaa4ae50", 0x7a}], 0x1, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {r76, r79, r82}}}, @rights={{0x38, 0x1, 0x1, [r83, r86, r87, r92, r94, r96, r99, r101, r102, r103]}}, @rights={{0x1c, 0x1, 0x1, [r104, 0xffffffffffffffff, r105]}}, @cred={{0x1c, 0x1, 0x2, {r110, r111, r113}}}], 0x98, 0xed455a6b9b65b63c}, {&(0x7f0000003300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000003380)="a581b60ef1e692293b5ce81b1e18194d65a96cb83cf8a550f0e5a84c03859e082d34ebbfac513498a48c27f710c2e4b717143454a1e937f58878802e1d8932f5876b3af42c5e2de21e593c24120b7cf900fdea035cc9aa46a60f59dee2bb1155045342a690f40fb15a8a563127cf25a2be24d0b65ace2318265e0dc44a73f96075e732c174438917b040ffec5fe6ab6d24854e4a0c", 0x95}, {&(0x7f0000003440)="c465991d5d35272d42449a7b269aedd9c8c73c026c8f2a5b1286bb9f7cc8d4afabb8a33b45f788456b0035f884121921378a427876f74e1f206cedfa7f4b3beb671260f252e8952fcaa9590c959cba404a39480202db74b0bbfc3057010a0453eefefb7e1940624220ace40446148303e48a548991a8b4009d903d3d5ed236c53d08f1c08911329f54", 0x89}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="1330cb603339a6abbc6c50844d2c2dc73b2c5e137e9c1edf7e5baab881043299bec0765b5a5625d372ba2c0fc5d5ecdc26a8cf1d845a03548a702ddc3f1642f0605d2bc92381c95b9f0a393073f7979f53e703a72aab1ff81fef34928e5e29ece3dba32bede93b9aceec286914c74874630777d1b0d95ce4d2a9b12c700b9df428733d1f575a97d2d07f3b6b0228a951404dd450c96adcee44cd5da67dbd0bd6c0bfaf3d917a7a2306de1a18a9094c4d6b2863584ecb", 0xb6}, {&(0x7f00000045c0)="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", 0xfd}, {&(0x7f00000046c0)="ee4f941eea11d1ca25a20da69866f2afbcce3efe21f8d1b32a8c80b4ef3e8a616f48b648885b", 0x26}, {&(0x7f0000004700)="da6f1b469439bfcfb225766a8dac8806c54dbb3944fda5", 0x17}, {&(0x7f0000004740)="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", 0x1000}], 0x8, &(0x7f0000005e00)=[@rights={{0x2c, 0x1, 0x1, [r114, r116, r117, r118, r120, r121, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r122, r123, r128, r129]}}, @rights={{0x30, 0x1, 0x1, [r134, r135, r136, r141, r142, r146, r149, r151]}}, @cred={{0x1c, 0x1, 0x2, {r154, r158, r160}}}, @cred={{0x1c, 0x1, 0x2, {r161, r162, r163}}}, @cred={{0x1c, 0x1, 0x2, {r168, r172, r173}}}, @cred={{0x1c, 0x1, 0x2, {r174, r176, r178}}}, @rights={{0x18, 0x1, 0x1, [r181, r183]}}], 0x118, 0x40}, {&(0x7f0000005f40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000005fc0)="35799f570facfa1d03eee71231ba86604663637f1471d7", 0x17}, {&(0x7f0000006000)="3c374a6d92250e6c1d7b34865cc8a791c7fde07979db234537fd713a458047be18f4526c98a5825e15125e8ffb32216f1ca6c0d3b605e537e11fa63898d0102415d03eb0fd37677546f8c5f3f04577c3f203fb454c95f442", 0x58}, {&(0x7f0000006080)}, {&(0x7f00000060c0)="da86604219bac81f25825f100654fcfc6fa5d7cce585265d376703b9b921ff68675430b7bcdb04930f4423a582c8a9a77170a5e90b417e92a412d0c8e8b4a56ee78d8296de9970b83c33d2c0f107d80542e5ca135b924acefca21704f32b6f76127b6f235b7c3396c0f89e5ea1a72410e0ccfb3832392f002f71f4d40f43f5825b5195733f7e53b6c57eebbd492c17d40511eeca3f5443311030475eee3861d5", 0xa0}, {&(0x7f0000006180)="c64314d8b865bf297e7256af7a7ed39cbe464fcadaf0fc7a8910c6c3f5efd82c1210510d30504b592233741abc8711369c23e2908f291654e33fb3df6a0ede9e0ee0301e3ab4aa8c4422674dd8ff99cd1166105c1fba4f7b61dfdfa67b80add43eddfc6cbb08748796e85de6356b4ec55ba639aec5af230178f233", 0x7b}], 0x5, &(0x7f0000006500)=[@rights={{0x1c, 0x1, 0x1, [r184, r186, r187]}}, @cred={{0x1c, 0x1, 0x2, {r188, r191, r193}}}, @rights={{0x2c, 0x1, 0x1, [r194, r196, r201, r202, r205, 0xffffffffffffffff, r207]}}, @cred={{0x1c, 0x1, 0x2, {r212, r213, r215}}}, @rights={{0x1c, 0x1, 0x1, [r216, r218, r219]}}, @rights={{0x24, 0x1, 0x1, [r220, r225, r226, r228, r229]}}], 0xd8, 0x8cd951f46d006719}], 0x7, 0x800)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=','], 0x1}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
r230 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r231 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20840, 0x0)
r232 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r231, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000040}, 0xfffffffffffffd1d, &(0x7f00000001c0)={&(0x7f0000000640)={0xa0, r232, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x0, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x90}, @TIPC_NLA_SOCK_HAS_PUBL]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f23ca0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NODE={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000194}, 0x40008000)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0x1ca1, &(0x7f0000ffd000/0x3000)=nil, 0x6)
r233 = socket$inet6_tcp(0xa, 0x1, 0x0)
r234 = dup3(r230, r233, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r234, 0x8912, 0x400200)
r235 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r235, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r235)

07:52:12 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:12 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3241.214369] protocol 88fb is buggy, dev hsr_slave_0
[ 3241.219530] protocol 88fb is buggy, dev hsr_slave_1
[ 3241.244641] hfs: unable to parse mount options
[ 3241.359523] hfsplus: unable to parse mount options
07:52:12 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x200001e0}}, 0x0)

07:52:12 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@bcast, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
socket$unix(0x1, 0x4, 0x0)
set_thread_area(&(0x7f0000000000)={0x93d9, 0x20000000, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1})
close(r0)

07:52:12 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:12 executing program 1:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='/dev/net/tun\x00', 0xd, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r2, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:12 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @default, @default]}, 0x48)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400080, 0x0)
accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80800)
close(r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000))

07:52:12 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:12 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0)
accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1)
close(r0)

07:52:12 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:12 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000000))
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @bcast, @bcast, @rose, @default, @default]}, 0x48)
close(r0)

07:52:12 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='map\x00\x02N\xd1\x1de\xd1\xe4-^\xeb\xa6\x86\xdf\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\xe8\x00\x00\xd8\x00\x1d\xb7Y\xfd\f\xdeI\bOe\x19K\x19\xf1\x9a\xde\xe8\xed1\x02\xec_\xe8\xf5H\xb0\xd0\x98,\xbd\xd0\x19Q\x9e\xc4\xd8{YJ-\xd1\xcf\x7f\xb4\xbb\xe9\xf3D\x80@f\x03\x9e\xa8\xd6\xfd\x83R\xc7\xec\xe1b\xbfW[\xd1\xa9U\x06\xc6\xfa\xa9)\xe7C\x93\xf1\f(:?\x1e\xbe=\n\\\x18\xd6\xdcS\x81\xaf\xfa\x00\x15\x9ag1b\xa5K\xaf\x9aT\xa7\xf3\xe7XS`\x03\xd0|\a\x8f\xe8\x8ed9y\xebSC\xdc\xfa\x18\x8a%\x1a\xe2`\xc9\x13,YvE\"Cy\xab\x8d\xa8e\x9e\xb0<\xddN\xc5\xe4\xfb\x8dt\xf3p0\xb3\xd5\xe6\x8b\x12\xef\xd8\xd05\xac\x82\x86\x96q\x95\xc9\xc9~\xa1\b\x92\xbfbqtV2\x93h\x90C\xbb\x81GRJtV]m\xcf\xa0\x82pq\xa5\xbd\xf7oVL\xfb\x9fY%\x05\xbd\xd5>g&\xe4\x84N\x9fg\t$\xd0\xba>CAC\xe8\xc5\xf7\x15\x9e\x80g\xda\xf6e\x943\xf0n\x88\xc7\"a\xac\xfaN\n\x15Y\xc5[\xbaX\x99\xbb\xc05$\xa5k9\x06hD\xb7\xb0\xb0\xb3\xd4\xab\x0f\xaa&\xe2\xe6\n\x02K\x8b\xca2\x9a\xb9U\x85\xaf\xa9\x90\x81\xf8\x8a\xb6\xe5\xf6j5\xfay\xf7\xcd\xf0\x86\x952Q'}, 0x10)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000280)=<r2=>0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000002c0)=r2)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r2)

07:52:12 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r7, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffffa8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose, @default, @default]}, 0x48)
close(r0)

07:52:12 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:12 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x7ffff000}}, 0x0)

07:52:12 executing program 0:
r0 = socket$unix(0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00')
getdents(r2, &(0x7f0000000040)=""/123, 0x7b)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0xffffffe1}], 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$binderN(&(0x7f00000009c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
r6 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x8, 0x10100)
r8 = syz_open_dev$binderN(&(0x7f00000009c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000040)={0x7, 0x1, 0x9, 0x0, 0x6, 0x8})
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x26, 0x9, @scatter={0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/108, 0x6c}]}, &(0x7f0000000240)="5e632e65a8d86c047a15fd42a99e0f0255175e40a128de5f3a5a8772836d324bcdfb66c0b322", &(0x7f0000000580)=""/238, 0x3ff, 0x10000, 0x3, &(0x7f0000000480)})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r1, 0x0)
r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
io_setup(0x8, &(0x7f0000000200)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7600, 0x3, 0x1, 0x0, r9, &(0x7f0000000680)="df637ff0211e4e7f9d795888667bd19b57c06495ced947c2aa54d803a158822673db6db272bb841a441076f21d122ef14b523752", 0xffffffffffffff27, 0x5, 0x0, 0x2}])

07:52:13 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@bcast, @bcast, @bcast, @null, @bcast, @rose, @default, @default]}, 0x48)
close(r0)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000040)=0x28)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@local, @multicast1}, &(0x7f0000000100)=0xc)
write(r1, &(0x7f0000000140)="f053eaa675f52d7f2a21ff610d453ef9a799b7e4fdd4d53de9072ded5a79de1cde8c8bf9bf916bd6c4100ca242e5e4636a0a1f901d9f650d080402a557e225a1a845898bc8972e808771d2ace562a54f2886242ec77239", 0x57)

07:52:13 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526c3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'vat\x00\xd8O\xff\xff\xff\xff\xa8\x03\x00', 0x2010})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4080, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x3})

07:52:13 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:13 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff), 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="0205962f0500b839edea26ee84bb5a424cd93df75c55161dbacf59dd1273889294557bb2ff1b9bfedaa4fca36cceb1da0983e7f757ba2bb612d22f496846dd6f46a6e84a8e159ba484b34ed7d7800bed5a4cb64b05ed35ea1ba20de68a1b52b95441ce8a10a819643c72c2cfc28795505d29ac92daa592fa0b7369f7b8d32085a39b04cd5fada2a512c35337ee34a02fbd2110d5f0966b551dae7a9f20c604b2176bfb84cfa6e1f85e95a626fe9c5937b88cb36c1bd4fc", @ANYRES32=<r1=>0x0], &(0x7f0000a8a000)=0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x0, r1}, &(0x7f0000000200)=0x20)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004ffc, 0x0, 0x0)
getpid()
ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
getsockname(r6, &(0x7f0000000940)=@can={0x1d, <r8=>0x0}, &(0x7f00000005c0)=0x80)
bind$packet(r5, &(0x7f00000009c0)={0x11, 0x1, r8, 0x1, 0x0, 0x6, @broadcast}, 0x13b)
setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f00000003c0)=0x3fd2, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4)
sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)

07:52:13 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:13 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
fchdir(r0)
r1 = dup(0xffffffffffffffff)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x1, 0x2, 0x8}}, 0x14)

07:52:13 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0xfffffdef}}, 0x0)

07:52:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x10000100000000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000067, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

07:52:13 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:14 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:14 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:14 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x2}, 0x0)

07:52:14 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:14 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:14 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000040)={0x8, 0x2})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:14 executing program 3:
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xa01}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
openat$tun(0xffffffffffffff9c, 0x0, 0xdba2110f40b60d4d, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(0xffffffffffffffff)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
close(0xffffffffffffffff)

07:52:14 executing program 0:
sysinfo(&(0x7f0000000000)=""/22)
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast1, 0x0, 0x0, 'sh\x00\x15\x00\x00\x00\x00\x00\x00T\x00'}, 0x2c)
clock_adjtime(0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\xff\xff', @ifru_flags})

07:52:14 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae91, &(0x7f00000000c0))

07:52:14 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x3}, 0x0)

07:52:14 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:14 executing program 0:
syz_open_procfs(0x0, 0x0)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
timer_create(0x0, 0x0, &(0x7f0000000600))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140))
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffdc1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000009000000f6626d", @ANYRES32=0x0, @ANYBLOB="030000160000000008001b0000000000"], 0x28}}, 0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
setresgid(0x0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x9)
setresgid(r4, 0x0, 0x0)

07:52:15 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3244.254155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 3244.265828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
07:52:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{}, 0x0, @in=@multicast1}}, 0xe8)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3f)
fcntl$setstatus(r0, 0x4, 0x80000000002c00)

[ 3244.321708] net_ratelimit: 18 callbacks suppressed
[ 3244.321716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
07:52:15 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:15 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x4}, 0x0)

[ 3244.436936] ptrace attach of "/root/syz-executor.3"[7184] was attempted by "/root/syz-executor.3"[7185]
07:52:15 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004044, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

07:52:15 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sync()
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x1000})
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x400})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/det/t\xf5n\x00', 0x482901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:15 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x140, 0x0)
sendto$inet(r2, &(0x7f0000000080)="61e603ee3453d0337ab526946ae1a5f308d68a8774cbd658b2a6b81d0652662efaaa7e9c714e99c57037968f90b92db4a3eaf777dc4aa56dc1af91bc4f0d779858938c6a8b21fcfe0d68525d0a9bf2d337a6d81e3ddf91e7232c31b406704e9cfef7c4f8ba3aae1b98bff6616a28", 0x6e, 0x585282e34a096d19, 0x0, 0x0)
pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:15 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3245.104463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 3245.154537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
07:52:16 executing program 3:
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50a430efcfa8b279e5fec9451e89dd961dec5b04e7f03a7c33b9767e3e843b21e5a8fc4e0ae7e68aa7199b3020afaa35693e2a94896ec1d9e7e7ca2259", @ANYBLOB="00000000000000000000020000004c0001000800030000000000100001007564703a73797a3000000000040002002c"], 0x2}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)

07:52:16 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x8}, 0x0)

07:52:16 executing program 0:
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r0 = getpgid(0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000140)=0x8)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8200, 0xa9eb18ce6fafff0b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = getpid()
socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492191, 0x0)
process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/117, 0x75}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fcntl$getown(r2, 0x9)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x804a12, 0x0)

07:52:16 executing program 1:
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="f65dfe29f5c7836fcf81ef2b64c4f6c5106ded300e5766eef244f68e6c7ff83195fea0ad97b063988d7d2e0727be1eb06858932de5b1b1536a52440341786e00e9b22e2d1dc2c4b2fb24a1a4396c7e1196ae74dff3c1ad1fa2d46b9489331f", 0x5f, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000140)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}]})

07:52:16 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:16 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:16 executing program 3:
socket$inet(0x2, 0x1, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0408cd8034"], 0xc}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYRESDEC], 0x0, 0x33}, 0x20)
tkill(r0, 0x39)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 3245.374369] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.379546] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.384751] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.389838] protocol 88fb is buggy, dev hsr_slave_1
07:52:16 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00')
read$FUSE(r0, 0x0, 0x0)

[ 3245.529999] ptrace attach of "/root/syz-executor.3"[7276] was attempted by "/root/syz-executor.3"[7277]
07:52:16 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:16 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x35}, 0x0)

07:52:16 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x2})
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b40)}, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad)

[ 3245.694379] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.699534] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.704727] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.709795] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.797662] device nr0
 entered promiscuous mode
07:52:16 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:16 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:17 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x10018)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r4, &(0x7f0000000180)="db40951195b65329509626699071a86008", 0x11)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r6 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r7 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r6)
keyctl$read(0xb, r7, &(0x7f0000005340)=""/4096, 0xd900)
r8 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r9 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x1001, r8)
keyctl$read(0xb, r9, &(0x7f0000005340)=""/4096, 0xd900)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r9, r4}, &(0x7f0000000480)=""/92, 0x1de, 0x0)

07:52:17 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3246.319928] device nr0
 entered promiscuous mode
07:52:17 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002a00000084000000c45a4a000000009500000000000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0010e159"], 0x14}}, 0x0)

07:52:17 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:17 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:17 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0xffffff1f}, 0x0)

07:52:17 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='overlay\x00', 0x20000, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x0, 0x60d8b10dc8c1cce8, 0x12, 0x65, 0xf44eb32fe192a927, 0x37], 0x2d, [0x60, 0x30, 0x38, 0x66], 0x2d, [0x38, 0xa, 0x31, 0x5b4b04856b5171c6], 0x2d, [0x37, 0x32, 0x33, 0x3], 0x2d, [0x35, 0x36, 0x62, 0x1, 0x61, 0x7f, 0x0, 0x37]}}}]})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
read$FUSE(r3, &(0x7f0000000440), 0x1000)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/65, 0x41)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]})
rmdir(0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)

[ 3246.652625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7338 comm=syz-executor.0
07:52:17 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000440)={0xf000, 0x3000})
accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0}, &(0x7f00000000c0)=0x14, 0x0)
r3 = geteuid()
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="b00100001600200025bd7000fddbdf2500000000000000000000000000000000ac14141a0000000000000000000000004e2107ff4e200000000083e004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="6b2577370db5c677fb729bc80cd2496f000004d62b000000fe8000000000000000000000000000aa010000000000000000000000000000009a040000000000000000008000000000f7ffffffffffffff04000000000000000300000000000000ef0b0000000000000500000000000000018000000000000000000000000000000800000000000000ce900000010000800e0000002cbd700003350000020002cf0000000000000000a0cc000067000000240009002000000000000000008000000000000007000000000000002400000000000000380017000700de9e26bd70002cbd70002dbd700027bd70007f00000001040000070000000000000069010000ff7f000000080000ff01000048000200616469616e74756d2863747228646573335f656465292c6165732d67656e65726900000000000000000000000000000000000000000000000000000014000d000000e99a00"/360], 0x1b0}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
close(r4)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x80000)

07:52:17 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:17 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700), 0x100000000000000c)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)

07:52:17 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x2}, 0x0)

07:52:17 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:17 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
fchdir(0xffffffffffffffff)
r4 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_get$pid(0x0, r4)
ioctl(r2, 0x0, 0x0)
getsockname$inet6(r1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000000))
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

[ 3246.905641] overlayfs: filesystem on './bus' not supported as upperdir
07:52:17 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:18 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:18 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x2, 0xff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/d9Qt.tun\x00\x00\xe0\x00', 0x8602, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xffffff0b)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r5 = syz_open_pts(r4, 0x120)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0xe)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df00107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364506b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99526c2aed6d90fff50cc840f630b17a4a827b1a7500", @ANYRES32=0x0, @ANYRESHEX], 0x5}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001400090500e6ff020000000000000000744af2cedd2b09c30ba1ff2c6d98030bc4a657902163f51140bfe73cc472a205c1a0faf94069d6bb17d47fd1b75482b61bdcb3a5bc2dbb3eca5738445c3dc2d05a85179490c7961750f9bc529f9defb4c2668b426a7a7c6c011a3a247b15fbda4400f18865ab2bfb5c28100ddeeaa6bcc2047fa90468efd7075d790bf404aba2527b7049ec70a62f3ebc5cd21b8d76064c37", @ANYRES32=r6, @ANYBLOB="140002008000000000000000000000000000aa000502a5413bf4c8b415a169bf37d8634d653926815620"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'rose0\x00', r6})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x0, 0x70bd25, 0x25dfdbfb, {0x2, 0x20, 0x10, 0xff, 0x0, 0x5, 0x0, 0x1, 0x3000}}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x3c}}, 0x0)

07:52:18 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x3}, 0x0)

07:52:18 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:18 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3247.628637] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
07:52:18 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:18 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x10}, &(0x7f0000044000))
syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00')
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0xfffffcd6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
lstat(0x0, &(0x7f0000000300))
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse.', 0x0, 0x0)
write$FUSE_CREATE_OPEN(r1, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
read(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0xfffffcd6)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse.', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="914709", @ANYRESHEX, @ANYRESDEC=r2])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000003c0)={0xa0, 0x0, 0x7, {{0x0, 0x2, 0xfffffffffffff001, 0x2, 0x8, 0x0, {0x3, 0x0, 0x92f, 0x0, 0x1ff, 0x3e95, 0x0, 0x6e8, 0x800, 0xfd, 0x0, 0x0, r2, 0x0, 0x7}}, {0x0, 0xc}}}, 0xa0)
getgroups(0x5, &(0x7f0000000140)=[0x0, 0xee01, 0x0, 0xee00, 0xee01])
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0)
dup(r0)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c0100006e6f3d44074449e5e647074bc5450ba406112ed6a3957b844772efe5cb30d80add95bffe9bdfc23929493b3521da", @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x82731, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820014, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x3c)

[ 3247.842961] audit: type=1400 audit(1574149938.657:10274): avc:  denied  { map_read map_write } for  pid=7439 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
07:52:18 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x4}, 0x0)

07:52:18 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:18 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x18}]}, &(0x7f0000000100)='GPL\x00'}, 0x48)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x4, @remote, 'team_slave_1\x00'}}, 0x1e)

07:52:18 executing program 0:
setpriority(0x2, 0x0, 0x3)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r3 = inotify_init1(0x1800)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="ae2f48025001000000", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r5, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0x0, @empty, 0x3}}, 0x80, 0x6}, 0x90)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xa, 0x5, 0x20, 0x70bd25, 0x25dfdbff, {0x7}, [@generic="3c23586d6b58aaf25f05c1e4bdd09aa8e9842d66c2d4b44fd841d150ee51ba5077ca204670a387"]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x68040)

07:52:19 executing program 0:
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x4, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000)={0x1}, 0xfe9e, 0x10, &(0x7f0000000000), 0x10}, 0x70)

07:52:19 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000000)={0x7, 0xe324})
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)

07:52:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x80c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{0x80, 0x1, @m_mirred={0x7c, 0xa, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3f0, 0x5, 0x0, 0x18}, 0x2, r5}}}, {0x44, 0x6, "4262c955070aea8e433659969ea5c2a79bd494527605258e4fc41f395dfec28f4fbbbbdf0eb76cf074853b63ffa189185dfce49b4a2cc8b78f48815a55efe617"}}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x53fd500eddda447b}, 0x608c8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x7c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4c, 0x2, [@gre_common_policy=[@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x6}], @IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}, @gre_common_policy=[@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf9c31}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x1}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_LINK={0x8}]]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

07:52:19 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3248.415126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
07:52:19 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x6}, 0x0)

[ 3248.510911] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 3248.523484] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
[ 3248.531291] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[ 3248.570338] netlink: 'syz-executor.3': attribute type 14 has an invalid length.
[ 3248.656825] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
07:52:19 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:19 executing program 0:
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002600)={0x8, "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", 0xfffffffffffffe3c}, 0x1006)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
signalfd4(r1, &(0x7f0000000200)={0x3}, 0x8, 0x80000)
socket$kcm(0x10, 0x2, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4140)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1004)

07:52:19 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3248.700618] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
[ 3248.727528] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
07:52:19 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0x2, [@empty, @random="9888d9f9d4bc"]})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r4, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r4, 0x3c}, 0x8)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x4)

07:52:19 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
close(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000f3ff95000080000000001739f486a0ef063f58e57c4f3c167972fc5489a4ef75c6020d447d9d0070d52bafd9c4365dde7f3bbfe9e67ef98b9029fd336949c2aba9c74e66b880084c49dc9d0654d67f0094d26a9eacb2ae39233f04941f0de3a2932155c40c710cdaee6d1631c8a46f7f3616195c7312002048bf8f117b054e35b249bdca000c81d6ddd903a3083406d3746b10dd8184a31d3cc4c07cda5c3e09f8f1adca6fcec858ce4d3a0f5ea4686b4b00"/202], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r5, r9, 0x0, 0x1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x34000}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x8d7fa}], 0x1}}], 0x2f81, 0x0)

[ 3248.770623] netlink: 'syz-executor.3': attribute type 14 has an invalid length.
07:52:19 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:19 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0})
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xfa0, 0x5, 0x10000, 0xffffffffffffff94, 0x101, 0x400, 0x1000, 0x7}, &(0x7f0000000180)={0x5, 0x100, 0x4, 0xffffffff, 0xfffffffffffffffa, 0x4, 0x1, 0x6}, &(0x7f00000001c0)={0x1, 0x3f, 0x100000001, 0x1, 0x1f, 0x3, 0x7, 0x1}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={0x8}, 0x8})
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
shutdown(r1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr="a0a09c666df7743622a32f3e229c0d54", 0x7}, 0x1c)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0)

07:52:19 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xa}, 0x0)

07:52:20 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:20 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10becf023e7cf945}, 0xc, &(0x7f0000000200)={0x0}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000280), 0xc)
unlink(0x0)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x0)
ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000240))
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39)
write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02b96cfb46a6a3518761c2bb57f58ca3ed", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000004c0)=0x3)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)={<r4=>0x0, 0x3}, &(0x7f0000000300)=0x8)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0x800, @rand_addr="cdee6aa22c273538bb35ef6fd2f1bdf7", 0x6}}, 0xcd93, 0x8000, 0x1000, 0x8}, 0x98)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r4, 0x1}, &(0x7f0000000380)=0x8)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0)

07:52:20 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:20 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0xaf)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:52:20 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2800)
dup2(0xffffffffffffffff, r0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02000000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB])

07:52:20 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:20 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xc}, 0x0)

[ 3249.695583] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size)
07:52:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(0xffffffffffffffff, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x80000000, 0x4)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xf0640, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1d, 0x6dd, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040011)

[ 3249.787622] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size)
07:52:20 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:20 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:20 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x68)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x0, 0x5, 0x1}, 0xcc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x4, 0x0)
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)={0x7, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x4, 0x0, 0x80, 0x0, 0x3f, 0x0, "00021956"}, 0x5, 0x0, @planes=&(0x7f0000000000)={0xfffff08a, 0x3, @userptr=0x4, 0x80000001}, 0x4})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000000)=""/50)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r4, r5, 0x0)
connect(r4, &(0x7f0000000280)=@un=@file={0x1, './file0\x00'}, 0x80)
write(0xffffffffffffffff, 0x0, 0x0)

07:52:21 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:21 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xe}, 0x0)

07:52:21 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f0000e79000), 0x1000000000000104, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
r3 = socket$inet(0x10, 0x2, 0x0)
r4 = dup(r3)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x38)
ptrace$cont(0x18, r7, 0x0, 0x0)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r7, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = fcntl$dupfd(r8, 0x0, r8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r10 = dup(0xffffffffffffffff)
r11 = socket(0x20000000000000a, 0x2, 0x0)
connect$inet6(r11, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000000)=<r12=>0x0)
wait4(r12, 0x0, 0x40000000, 0x0)
r13 = getpgid(r12)
r14 = getpid()
sched_setattr(r14, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0)
r15 = gettid()
r16 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r17 = getpgrp(0x0)
waitid(0x0, r17, &(0x7f00000002c0), 0x5, 0x0)
r18 = getpgid(r17)
r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r20 = gettid()
fcntl$setown(0xffffffffffffffff, 0x8, r20)
r21 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r22=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r22}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r22}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r20, 0xffffffffffffffff, 0x0, 0x0, 0x0, r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0x0, 0x0, r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r18, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, r16, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r14, 0xffffffffffffffff, 0x0, 0x0, 0x0, r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r13, r10, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r22}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r23=>r7, r9, 0x0, 0x2, &(0x7f0000000180)=')\x00', r22}, 0x30)
fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x0, r23})
r24 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r24, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r25=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x7a, &(0x7f000059aff8)={r25}, &(0x7f000034f000)=0x8)
fsetxattr$security_smack_entry(r24, &(0x7f00000000c0)='security.SMACK64\x00', &(0x7f0000000100)=')\x00', 0x2, 0x1)
sendfile(r4, r2, 0x0, 0x8001)
r26 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfff, 0x2)
ioctl$FS_IOC_SETFLAGS(r26, 0x40086602, &(0x7f0000000080)=0x2)

07:52:21 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r3, r4, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = fcntl$dupfd(r5, 0x0, r5)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
fchdir(r6)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='vboxnet0\':\x00', r8)
fallocate(r7, 0xa, 0x3, 0x4)
syz_read_part_table(0x0, 0x0, 0x0)

07:52:21 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="6ecf9122634272090163e3b281a1dcb98e4fc2f489539845df1ec650994eb8c0e2215dd5dda443d6da0e5d2cda3f132d560ea35caf02de917c5bc02c908fe96a30fa0a8313a4b1fa22262899df41634e3f797274806899ab1cc9d342d69263d1dbe8dcabd4ec9aa8761c137fc71a7d8c8aa53d6cd3310a8c5113cdb46d2b1ec95d423755b0b8f8e43e19a51e60b9f1e2c1d5839ebffdf6a61e0bd8cadfa4e07c4b32aa19ecdf5a1ab87f03febe1c1cd0", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000580)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', r8})
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0xb444, 0x4)
sendmmsg$inet(r0, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0)

07:52:21 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:21 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:21 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "6d2b30963b8ef9c158a0dff31eb528cfafde3d8d"}, 0x15, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80802, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001240)={0x0, 0x0, 0x2080, {0x0, 0x4, 0x4}, [], "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", "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"})
write$UHID_CREATE(r2, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}, 0x120)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = fcntl$dupfd(r6, 0x0, r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)={0x0, <r8=>0x0})
ptrace$pokeuser(0x6, r8, 0x3, 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
write$cgroup_int(r5, &(0x7f00000001c0)=0x1000, 0x12)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86ddeadc65fe8000000000000000000d00000000aafe8000000000000000000000000000aa000000640000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)

07:52:21 executing program 0:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$selinux_access(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r:dpkg_exec_t:s0 system_u:system_r:kernel_t:s0 18446744073709553615'], 0x53)

07:52:21 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:21 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xf}, 0x0)

07:52:21 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r4, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x9ea}, &(0x7f0000000040)=0x8)

07:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0x4, 0x6, 0x3c6, 0x6e, 0x9, 0xe7, 0x2}, "cd8904e0e722c83b17cfc9bb2ee57dffad6e0c731e42a45efe2c1787"}, 0x3c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[]}}, 0x0)

07:52:22 executing program 3:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
acct(0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/194)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6016c28000140600fe8000000000000089000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)

07:52:22 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:22 executing program 3:
open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0)
mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x14c9044, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x1000, 0x5, 0x5, "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"})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x180042a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a71666d743d7609244cf4642af3095eee6301b5a0e9dad974d71a1e3de1285548d4f77454ae14cca86aa67c0a0b0b1a7ce698a7503906c6d088d749df5b2793ab1aa71235a6688f2beb6bb4ffa794b1265c7be881d4b1102f9f18a2af51294d9b87eeccc3a225591e72ece002d91652308f446fa1d8479ab4488b0b21e9fb25c5e69785"])

07:52:22 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='\x01\x00\x00\x00/net/tun\x00', 0x5094520fca4a0f98, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080))
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

[ 3251.277096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=966 sclass=netlink_route_socket pig=7742 comm=syz-executor.0
[ 3251.294384] net_ratelimit: 10 callbacks suppressed
[ 3251.294392] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.294446] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.299435] protocol 88fb is buggy, dev hsr_slave_1
[ 3251.304540] protocol 88fb is buggy, dev hsr_slave_1
[ 3251.361356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=966 sclass=netlink_route_socket pig=7742 comm=syz-executor.0
07:52:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_LOCK(r1, 0xb)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00E&a', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r5 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="326fd53e6a2639aeb3a8b5f551eedec479c6fa791906e47ac26f79776712e7df8f2177246789d180344f8e4aec2f2c90a5c75a5c1a3c874bc99c1101894193d5af42b880b318129acaf0be720ffe64ce9a9e7a1bca1248497bef4fe8acd2a5b97ffca0e4d70198e4594d90f03620e8cfb3f36f7b5c271011bcf55a57782c859e49c9779d577fd425295068dc0927a086d5daf5e25caa35bf569ea464fdb4f899fc0a0b4a5f3b10f0348ceb26bc5e502742ffea04962ed38aaae8e50070552901a51c2a30", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r9, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
r10 = socket$xdp(0x2c, 0x3, 0x0)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x0)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = fcntl$dupfd(r12, 0x0, r12)
getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r13, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r13, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r14 = socket$inet(0x2, 0x4000000805, 0x0)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r14, r15, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r15, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="025f26d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0x4, 0x800, 0x8, 0x0, 0x0, [{r4, 0x0, 0xb5}, {r0, 0x0, 0x8}, {r5, 0x0, 0x4}, {r0, 0x0, 0x10001}, {r10}, {r11, 0x0, 0x1}, {r13, 0x0, 0xfffffffffffffffe}, {r15, 0x0, 0x5}]})
pread64(r0, &(0x7f0000000040)=""/55, 0x37, 0x0)

07:52:22 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000180)=<r1=>0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x400)
io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])

07:52:22 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3251.614366] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.619599] protocol 88fb is buggy, dev hsr_slave_1
[ 3251.624791] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.629871] protocol 88fb is buggy, dev hsr_slave_1
07:52:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r1, 0x80000000000000bd)
r2 = socket$inet6(0xa, 0x6, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r3, r4, 0x0)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xb}}, 0x1c)

07:52:22 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x10}, 0x0)

07:52:22 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:22 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4c002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0))

07:52:22 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x10, 0x5b, 0x0, 0xfffffdb0)
r3 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r3)
r4 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='eth0\x00', r3)
r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r6 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x1001, r5)
keyctl$read(0xb, r6, &(0x7f0000005340)=""/4096, 0xd900)
keyctl$negate(0xd, r4, 0x1000, r6)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3251.907224] EXT4-fs (sda1): Unrecognized mount option "jqfmt=v	$Lôd*ó	^îc
µ éÚÙt×=á(UHÔ÷tT®̨j¦|
[ 3251.907224] |昧P9ÆЈ×Iß['“«§5¦h�+ëk´ÿ§”±&\{è�Ô±/Ÿ¢¯Q)M›‡îÌâ%YrìàÙR0�Do¡ØGš´H‹!éû%Åæ—…" or missing value
[ 3251.934394] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.939536] protocol 88fb is buggy, dev hsr_slave_1
07:52:22 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:22 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x801, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r5, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x1000, 0x0, 0x101, 0x3ff, <r6=>r5}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0xf8, 0x400e, 0x0, 0x8, 0x3, 0x80000001, 0x3, r6}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
sendfile(r1, r7, 0x0, 0x800000bf)

07:52:22 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x60}, 0x0)

07:52:23 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000466a6d1025c5b93b71f29908e0b6000000006500000000f3ffff620ad9050def520f3a0dcbfc9fe29131d60600eb37ea80ad68831e4c9d85bb9c66a9546b8780d604068a804c34260831212b764428bb"], &(0x7f0000003ff6)='G\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

07:52:23 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x82, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:23 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:23 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x8041, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5766e9538236a14e}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000040)=[0x400000000000001], 0xfffffffffffffffd, 0x0)

07:52:23 executing program 0:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r0=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getgid()
stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x7}, [{}, {0x2, 0xc, r0}, {0x2, 0x3397dacd9d777884, r1}, {0x2, 0x4, r2}, {0x2, 0x1, r3}], {0x4, 0x2}, [{0x8, 0x4, r4}, {0x8, 0x1, r5}, {0x8, 0x2, r6}, {0x8, 0x1, r7}], {0x10, 0x1}}, 0x6c, 0x2)
syz_mount_image$ceph(&(0x7f00000005c0)='ceph\x00', &(0x7f0000000600)='./file0\x00', 0x1, 0x3, &(0x7f0000001840)=[{&(0x7f0000000640)="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", 0x1000, 0xfffffffffffffff9}, {&(0x7f0000001640)="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", 0xfd, 0xcce}, {&(0x7f0000001740)="6bc6f43ef13ccff099ef5546f5b6b47f2e69d1f2ebf0af1e01b64fdca419d26b392a9972e52651e2d50f61b98b60fff037866e0827e046328ee6da292acbbdb6769500fb55c8ab3a7a3e152040ea5b2e43759b9f384913a0491d550ec084109af8fc2be0eef985af2c30e216701cbd0fcfc21691b7598feb7ff34d12bf03beaa84ea0bb31cc5d62214f74e1c8c0786d84d3eee9338c91117148fe518e841b738cb1f109e735a81dda813813db641dfde0041a6bbb77393a74e32591e3fecac0cf594f45157394e86d7", 0xc9, 0x2}], 0x8032, &(0x7f00000018c0)='system.posix_acl_access\x00')
r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001900)='/proc/capi/capi20ncci\x00', 0x101100, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000001940)=0xffffffffffffffff, 0x4)
r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001980)='/proc/capi/capi20\x00', 0x8000, 0x0)
getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000019c0)={@remote}, &(0x7f0000001a00)=0x14)
pipe2(&(0x7f0000001a40)={<r10=>0xffffffffffffffff}, 0x800)
openat(r10, &(0x7f0000001a80)='./file0\x00', 0x800, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x12)
openat$mixer(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/mixer\x00', 0x100, 0x0)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x108000c0}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r12, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}}, 0x20004008)
recvmmsg(r11, &(0x7f0000004a80)=[{{&(0x7f0000001c40)=@rc, 0x80, &(0x7f0000003180)=[{&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f0000001dc0)=""/244, 0xf4}, {&(0x7f0000001ec0)=""/15, 0xf}, {&(0x7f0000001f00)=""/253, 0xfd}, {&(0x7f0000002000)=""/88, 0x58}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/200, 0xc8}], 0x7}, 0x7}, {{&(0x7f0000003200)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003280)=""/242, 0xf2}, {&(0x7f0000003380)=""/190, 0xbe}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x3, &(0x7f0000004480)=""/47, 0x2f}, 0x5}, {{&(0x7f00000044c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004540)=""/175, 0xaf}], 0x1, &(0x7f0000004640)=""/108, 0x6c}, 0xacc00000}, {{&(0x7f00000046c0)=@caif=@dgm, 0x80, &(0x7f0000004780)=[{&(0x7f0000004740)=""/2, 0x2}], 0x1, &(0x7f00000047c0)=""/98, 0x62}, 0x1}, {{&(0x7f0000004840)=@sco, 0x80, &(0x7f0000004a40)=[{&(0x7f00000048c0)=""/42, 0x2a}, {&(0x7f0000004900)=""/52, 0x34}, {&(0x7f0000004940)=""/214, 0xd6}], 0x3}, 0x80000001}], 0x5, 0x40032001, 0x0)
r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004bc0)='/dev/snapshot\x00', 0x10000, 0x0)
write$P9_RREADLINK(r13, &(0x7f0000004c00)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000004c40))
r14 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_netdev_private(r14, 0x89f2, &(0x7f0000004c80)="c407456d973632f92819f898f06393039f54b9866ace56ef34c56b8f47066082a50f9ed437a5fd359b04a21b4f3f901f5b1504f86eaa372c83e12adb8db110f7d84a59150c405cb1b27c4b714e31397b545aa495ded37abf23da593fb75db5a32a79670440dd706d8cd2679b84eb7057211bb63047b76adbfe89044b0b87620e1115e089915398362bb531e6642ad20ec3f1db2081b8609776a6fd37d326a13828")
ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000004d40)={'bond0\x00', {0x2, 0x4e20, @loopback}})
r15 = syz_open_dev$admmidi(&(0x7f0000004d80)='/dev/admmidi#\x00', 0xfffffffeffffffff, 0x800)
accept(r15, &(0x7f0000004dc0)=@isdn, &(0x7f0000004e40)=0x80)
r16 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000004e80)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$VT_RELDISP(r16, 0x5605)

07:52:23 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:23 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000112a7b0000000000000000000000000300000000200000000000000000000000000000feffffff0000000000000000070000000000000000b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000002000000000000000ffffff7f000000000000000000000000000000feffffff010000000b0000000900000000ff00000000000000134ac9e8b83246c800ba68000000000e0000000000000000010000000000000f6f00000000100001010100e1c90fed90ac00000000a85f001a4b000000000001000504000000000000000000020000000000007000000070000000a000000041554449540000000000000000000004000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0)

07:52:23 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3252.683379] audit: type=1400 audit(1574149943.497:10275): avc:  denied  { create } for  pid=7860 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1
07:52:23 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xf0}, 0x0)

07:52:23 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3edf08260f3026f30f53ecc4e1fc286e070f20e035000040000f22e00fc75ea7670f01c3b878e6ef0f0f23d80f21f835c00000900f23f866baf80cb8e62c5081ef66bafc0c66ed67360f01ca", 0x4c}], 0xcc4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4080, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9ff], 0x1f000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)

[ 3252.792402] audit: type=1400 audit(1574149943.497:10276): avc:  denied  { read } for  pid=7860 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1
07:52:23 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x50}}, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x38)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r4, 0x0, 0x0)
ptrace$setregset(0x4205, r4, 0x9ae133becf491ff0, &(0x7f0000000100)={&(0x7f0000000180)="c17410ea6478cbd9462367028e9a5ccba0119834412e54ecfe6e658689ac31e4237c7e7e5d218cabbdfaf8975635ed55420f7cf1758e41ae912aa3e03c7ae50611f9f1bfb04d1abf0397fde93515384db2db59a8e9e62ad434ebfe9bf82b24ac4270cebc4538cdfcda11b826d7134fb99d32d98e8f1efb29391984411f", 0x7d})

07:52:23 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3253.116556] bond0: interface bond_slave_0 is now down
[ 3253.122517] bond0: interface bond_slave_1 is now down
[ 3253.150479] bond0: now running without any active interface!
07:52:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
fdatasync(r3)
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:24 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x300}, 0x0)

07:52:24 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:24 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x12)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000280012000c0001007665746800000000ececfac5e025573fb5926c7ae92af81800020814a79f7488f611d01cb85041b7f809000000004600006df0840107d3c3bc1747ef4939dd822dafd6037136a70f304dbcdee66ed673df5c98c00033e06a14e3b513ef72364106b249dd59b35aafee80aa0a9b2e3bbfb4941d2ed7d7fc3c3dae0a3a354339e3572311b364ba77c4e343d199812b3862a78324fd19d159913729e3afec87ff2f99746c2aed6d90fff50cc840f622b17a4a827b1a75", @ANYRES32=0x0, @ANYBLOB="0000050000000007"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="3c000000100010e1babfab00f7ad399b00000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020045ff110000000000"], 0x3c}}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

07:52:24 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3253.736896] audit: type=1400 audit(1574149944.557:10277): avc:  denied  { write } for  pid=7946 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1
[ 3253.740746] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
07:52:24 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:24 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x30b}, 0x0)

07:52:24 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3253.988348] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
07:52:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='batadv0\x00', 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000288, 0x0)

07:52:25 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:25 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5603}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:25 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
write$evdev(r2, &(0x7f0000000080)=[{{0x77359400}, 0x10, 0x0, 0x5}, {{r3, r4/1000+10000}, 0x14, 0x7, 0x1ff}, {{0x0, 0x7530}, 0x0, 0x1000, 0x9}, {{0x77359400}, 0x1, 0x0, 0x1}, {{}, 0x0, 0x5, 0xb13c}], 0x78)

07:52:25 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x600}, 0x0)

07:52:25 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:25 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
dup2(r0, r7)

07:52:25 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:25 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000080000f0", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:25 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xa00}, 0x0)

07:52:25 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:26 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:26 executing program 3:
lookup_dcookie(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100)=0x7, 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0xdd09d5c4d21c61b6, @host}, {0x0}, &(0x7f0000000080)}, 0xa0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp6\x00\xcfM\x84\x81\xdb\x1f\x03\xa2\xdb\xcc\x139\x86R\xaa\x96|Y\x8e\x00\xcd#\x1c]\x97<@\n\x04\x1f\x8b0<R!\xf2\x04\x911v\xc8\x06\xdd6\fP\x1cT\x1d/#\xf1e\xc7\x01y\x9a\x9b\x94\x91%_d\xeaS\x88\xb2\x18v\\\xc5\xa2\x04~\x82\xdb\xe5\x06\x88A\xdc\rW\xddd\a\xd2\xb1\xa8\xcb\x9d]\x1d\x12j\x03\r\xa7&!\xe66\xe8\xae\xf6\x0f\x8a\xad\xc6+\xbd<\xdb\x1e\xdecD\x01\xac\x14\xbc\xf5\x95\n\x80\x81\xc4q\xd5\x92\xdc\xb5\xba\xa6\xa7\x96\x95\x86\xc1\xd7=\xe9\x7f\xaf\xe5\xae\x85\xbfM\xdf\x89\xe8\x87\x91\x0e7\x043t\r\x98Y\t\x06wA\xcdD\xdd\xe2\xe2\x93\xb0^\xf3\xdc\x84\x92\xc3\xd2C\xd5A\xbat\xbf\xa0s\x97\x91\xa9\xa2R\x15\x80\xf7\x8d\x00'/217)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000480)=ANY=[@ANYBLOB="01001b00000000000000c48e4785e786000000000000008e7f95f03bf7ba130000000000832a98cfa3815900000000002cedffffffff00"])
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback, 0x800}, 0x1c)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x16, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)

07:52:26 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:26 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xb03}, 0x0)

07:52:26 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000002", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:26 executing program 1:
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000080)='vboxnet0,}>nodevcgroup\x00', &(0x7f00000000c0)='vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', &(0x7f0000000100)='/dev/net/tun\x00'], &(0x7f00000002c0)=[&(0x7f0000000180)='/dev/amidi#\x00'])
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x595f, 0x40c300)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x1f, 0x4)

07:52:26 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$amidi(0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x2)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x7fffffff)
set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5)
ftruncate(r2, 0x1000000)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200440, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x5, 0x3, 0x5}}, 0x14)

07:52:26 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xc00}, 0x0)

07:52:26 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:26 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:27 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000003", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:27 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, 0x0, 0xfffffffffffffdfa, 0x0, &(0x7f0000000180), 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="db605ab571db130445883d06999c7650766e355896b655c2391bf777dd6e20ade001faee41c2c29f47fc9c2d905d875cdb4730cd84a2fef9bd2eb392a8f1d354681cc44effafda52e967080bf7b7f54ddc90010a3c9b7c04a388468fcdc908678ef7b8d2e632f049a48dc40de22888ef425d7cf230fb99ad986ec3b146f0e2a32423dbc3613f665a7e01a2c9823ed3b6848523afbd14af7597", 0x99}, {&(0x7f00000001c0)="3ceee115ef6e91fc170675bac3eadbd6eec74e6a8ecdbb525ed3b4fc9ae01a6e1ff37502c0f000c27a014600159b921b6f4d2b0a6988247ec3d0dbd0b08356825b44b8dda7fa5d8d525e714a05475e6701bea357139fc0c222d6cdd491dfce83375cf00f94c7a438df4ae3caf3af7b03209a3dac0eeb4abf2e3db55927ac8bcba1f66716610ea27787eba353309ea180230f5243295f805710cd6d7f9a4094f2627db3c96c5739a65bc5509023600fef0d8df7e54e5adb749b196fdeeae7503d202f04a8293538eaf1666fb0f0a1243fbbf1764ad85cb4fd0ab32fcb5b5cb39c2132e226211beb0b102c25d3c71cafe27c5b38f72dac", 0xf6}, {&(0x7f00000002c0)="0b63c0f46ec15a558f76305002c2c2cc6effde24fba9c8da69c23672786590d28238e2a3f3260a86bdb264184618295a1de12341b4f10ec8bb9691c3057262fa27061e6594e92fda8ab5639668a039c9ee7d8035dff741ab1f20753e9f10c6cd82d98d84278ff843384180531c3f4880d181a106434bab92cc236d34958da4ac63d0db305bc545eb32af81b1e6318addca9cba1128f9d886e1026d6ee8dd5bead60638f78179fb8c270eb7", 0xab}, {&(0x7f0000000380)="eb7578d335180524719729d52368c3b65b49978f4162b393b5b0f727d245a8104d4faf1eb46727eeeada967f7b175e8ecfa14629a9cbe71901addb9e564bd24bf5bfcc5277c7f78a44f9a88fbd6d52e870ad0f26e2027aaf58d350b0a114f1fa68fe855e4d28fc79b9124bdc52c0520cfe5d4973a3666a8a7692e3d1502e2a4b4bc3c2ccdd6f680109330facf4c295384925f3cb7a92056538ffaa5ebbb59fc8d3a261818520075e6c6dae413ae9b9185d4e7964159eced6342f8c34", 0xbc}, {&(0x7f0000000440)="9b27cd423c9c7760fe7dbf91a3cf4e0f6f9e1b34cd1b8120b26a9f07cfe35e355808a6f364e576c3763493173c180ad665f55bb89a4d3e68ab551d3ebea968cb7530ba5c200b7f56e87bb9307f22561274dfc2424d6514e6895bcd883969ea0cfc96a52c6182f1ddb6b44feea436be90683e8b05084561f3f38fe141ade189b9d515ba44995a486d683c11001ec8b5cc295bc32c4cedb75ce9edc2ad72fc14a7f94435fea04a42116abce6cb35fefcf06695826d644834793a99e816f30588f93dfd64cdfa63458ba94567082daaace2", 0xd0}, {&(0x7f0000000540)="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", 0xfe}], 0x6, 0x3)
r0 = socket(0x10, 0x80002, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x20})
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000b40)={r2, &(0x7f0000000640)=""/60})
sendmmsg$alg(r0, &(0x7f0000000180), 0x49249249249252d, 0x0)

07:52:27 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xe00}, 0x0)

07:52:27 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x04\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={[], 0x2b}}, 0x20, {0x2, 0x4e23, @remote}, 'yam0\x00'})
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffffffffffffeb9, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r3 = userfaultfd(0x1800)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})

07:52:27 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$TCSBRK(r1, 0x5409, 0x1)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)
sendfile(r6, r8, &(0x7f0000000280)=0xffffffffffffffe0, 0xfffffffffffffffc)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9917000000000000000010000000"], 0x14}}, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = fcntl$dupfd(r10, 0x0, r10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r11, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
r12 = socket(0x0, 0x3, 0x8)
r13 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000002c0)={0x0, 0x200, 0xfa00, {0x2, &(0x7f0000000440)={<r14=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
sendmsg$key(r12, 0x0, 0x0)
sendmsg$key(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r14, @ANYRESDEC]], 0xfffffffffffffe56}}, 0x20004850)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r11, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, r14}}, 0x18)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48080809}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x50bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c000}, 0x4010)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x20200)

07:52:27 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x5)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
write$cgroup_int(r6, &(0x7f0000000080)=0x1, 0x12)
r8 = fanotify_init(0x0, 0x0)
fanotify_mark(r8, 0x65, 0x2, r3, 0x0)
fanotify_mark(r8, 0x44, 0x2, r2, 0x0)
r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
inotify_init1(0x1800)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
truncate(&(0x7f0000000180)='./file0\x00', 0x90002)
sendfile(r9, r9, 0x0, 0x8800000)

07:52:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socket$inet6(0xa, 0x400000000001, 0x0)
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3ab09d2a51c4bfce1e77551a8bd678625df08300200000040947bc2fdffe8cd918b03d3ab52ac02824fdf16e8b55041291559f3ee3a46069062af9680d512f4d85fe0bfe6f6ea0e054044e5347d2da801f0e107143b37a9902cebb58df9d70b43d65edd941e2671d3098ab82bc071a5b1f76a38c67dd400fb3c00d0d5db9ea853b88fb1753c8839888e9d392230ee9408e7d0fea0b908ff25ed848300346868439404a306c250f42ec737b797510851d3e7602fa595e94cbacf79f2ea7581d9cd6d91aba44e77ef9ed0a126f546807038b95150dacb905063b18aab203022dcc499dc5f9bfea04338296e3c66fdfc55ae869b7dd34f1acd0008d68a2da41a63b396c295aa890de2464e3e943942ab6c92baed2910df2cfc0948935f085d22fc4ae277ed272fd0ddeeed232e531592ce8dc241c0e9c315cc0af4612dbad946a1d561acf8e45215826d67b3811490453a77681ac9182834b4be1579e24508f6ca09344687f2c56610d313d3e2c426ed08105ba817c9e6b3af3dcf9f664344f730"], 0x44)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)

07:52:27 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000004", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4, 0x8)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r1, r2, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000080)=0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:27 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:27 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xf00}, 0x0)

07:52:28 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:28 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:28 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000006", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:28 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:28 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x3f00}, 0x0)

[ 3257.864357] net_ratelimit: 22 callbacks suppressed
[ 3257.864367] protocol 88fb is buggy, dev hsr_slave_0
[ 3257.874504] protocol 88fb is buggy, dev hsr_slave_1
[ 3257.879685] protocol 88fb is buggy, dev hsr_slave_0
[ 3257.884819] protocol 88fb is buggy, dev hsr_slave_1
07:52:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/devt/tun\x00', 0x24080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x183a40, 0x0)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))

07:52:28 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xfffffffffffffd44)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000022}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@alg={0xf8, 0x10, 0x8, 0x70bd25, 0x25dfdbff, {{'xchacha12-generic\x00'}, [], [], 0x2400, 0x7d92f52d5b905ae7}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x44000004)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000480)=0x2, &(0x7f00000004c0)=0x2)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00')
syz_open_dev$rtc(0x0, 0x200, 0x148e39d4697f0346)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4')
sendfile(r3, r2, 0x0, 0x9)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = fcntl$dupfd(r4, 0x0, r4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r7, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r7, 0x7fc00}, 0x8)
bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000440)={0x1, 0x1, 0x8, 0x7, 0x7, 0x0, 0x20, 0x20, 0xde9c, 0x2, 0x10001, 0x9})
creat(0x0, 0x0)

07:52:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x302, 0x8, 0x2, 0x1, 0x8, [{0x0, 0x100000000, 0x8d, 0x0, 0x0, 0x604}, {0x5, 0x3, 0x4d0, 0x0, 0x0, 0x6000}, {0xfffffffffffffffc, 0x0, 0x200, 0x0, 0x0, 0x4}, {0x1ff, 0x3, 0x37, 0x0, 0x0, 0x300}, {0x9a, 0x4, 0x2, 0x0, 0x0, 0x8}, {0x1092, 0x6, 0x2, 0x0, 0x0, 0xc24306ad6ca7260a}, {0x7d81, 0x9, 0x105d527c, 0x0, 0x0, 0x4}, {0x8, 0x4, 0x4, 0x0, 0x0, 0x400}]})
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=<r4=>0x0)
fcntl$setown(r3, 0x8, r4)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x800, 0x0)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000040)="fde7c3afbd46adf48c03c059834ba7241cba3b539020f6a729f0010228665daf536fe15c8608a4ff82d49280574792510944d85ce4e7fa5e87e8b68cd9a1914878e7c4b542e4390fa5b7270dfdba0ba03aa9fa82810bb4e6267b2e983f617810854f9fc8cf5a6534674fb8465d9560d4c4cebe7ec195", 0x76, 0x228c244c, 0x0, 0x1, r5}, &(0x7f0000000140))
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

[ 3258.174390] protocol 88fb is buggy, dev hsr_slave_0
[ 3258.179634] protocol 88fb is buggy, dev hsr_slave_1
[ 3258.184987] protocol 88fb is buggy, dev hsr_slave_0
[ 3258.190161] protocol 88fb is buggy, dev hsr_slave_1
07:52:29 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800000a", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:29 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x1310c1)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0xa, @pix={0x0, 0x20000000, 0x32314d4e}})

07:52:29 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9602}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:29 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x5865}, 0x0)

07:52:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x24002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xfffffffffffffeb6)
listen(r1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280000000000069078ac1414bbac1414bb00004e20", @ANYRES32=0x41424344, @ANYRES32=0x42424242, @ANYBLOB="65233c242d780000d916d89b84889bdee18d0500a0eab55544abf73d28ac0a8023f54e4b16d3117fba"], 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000000c0)="d2"})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r4, 0x0, r4)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x5, 0x81, 0xf11e})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1}, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x2, {0x8}}, 0x18)

07:52:29 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3258.659766] audit: type=1400 audit(1574149949.457:10278): avc:  denied  { set_context_mgr } for  pid=8274 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
07:52:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x8)
r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r7, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4)
fcntl$setstatus(r2, 0x4, 0x6000)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$evdev(r8, &(0x7f0000000140), 0x189)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x33)
io_setup(0x1ff, &(0x7f0000000080)=<r9=>0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x35b2, 0x100000000})
io_submit(r9, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
r10 = socket$inet(0x2, 0x4000000805, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r10, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r13=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)

07:52:29 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:29 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800000c", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:29 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:29 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x6000}, 0x0)

07:52:30 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa802}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vat\x03\x00', 0x43732e5398416f1a})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r3)
r4 = getpgrp(r3)
prctl$PR_MCE_KILL(0x21, 0x0, 0x4)
rt_tgsigqueueinfo(0xffffffffffffffff, r4, 0x2c, &(0x7f0000000440)={0x27, 0x3})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="14250000", @ANYRES32=0x1, @ANYBLOB="000000001f000000950000000000000040270e440800000001a33000ffffffff01d8ff03000001003854f0ff010000001800000000020000000000000100010018150000", @ANYRES32=r2, @ANYBLOB="00000000000000003ad67fff00000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd0, &(0x7f0000000240)=""/208, 0x41000, 0x0, [], 0x0, 0x2c14e5d700ab159, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x2, 0x8a92}, 0x10}, 0x70)
pread64(r5, &(0x7f00000003c0)=""/47, 0x2f, 0xffff)

07:52:30 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:30 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0xa925, 0x2, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r4, 0x2000)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
getpeername(r5, &(0x7f00000000c0)=@rc, &(0x7f0000000040)=0x80)
r6 = syz_open_dev$vbi(&(0x7f0000000980)='/dev/vbi#\x00', 0x2, 0x2)
getsockname$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a00)=0x14)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/29, &(0x7f0000000180)=0x1d)

07:52:30 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800000e", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:30 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x6558}, 0x0)

07:52:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0xc100)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r8, 0x8000, 0x0, 0x8}, &(0x7f0000000280)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280)={0x4, 0xde}, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r10, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={<r11=>r10, @in6={{0xa, 0x4e24, 0x1ff, @rand_addr="86cc575230f6db7a39ee9132ce26019e", 0x5}}, [0x3, 0x5, 0x6, 0x5c, 0x4, 0x0, 0x1, 0x5d2, 0x6, 0x4556c27f, 0x3913, 0x3, 0x3, 0x8000, 0x1]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r11, 0x9, 0x20}, 0xc)
socket$kcm(0x29, 0x5, 0x0)

[ 3259.690647] x86/PAT: syz-executor.3:8351 map pfn RAM range req write-combining for [mem 0x1fbd2000-0x1fbd3fff], got write-back
07:52:30 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
semget(0x3, 0x0, 0x280)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}], @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x40}}, 0x0)

07:52:30 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3259.934368] protocol 88fb is buggy, dev hsr_slave_0
[ 3259.939518] protocol 88fb is buggy, dev hsr_slave_1
[ 3260.020153] netlink: 'syz-executor.3': attribute type 18 has an invalid length.
[ 3260.080883] netlink: 'syz-executor.3': attribute type 18 has an invalid length.
07:52:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0)
connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="0245a6db", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x5, @ipv4={[], [], @empty}, 0x2}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e20, 0x6, @loopback, 0x5}], 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffd63, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x2)
close(r5)
r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x200004)
sendfile(r5, r7, 0x0, 0xfffffffffffff3ff)
openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r8, 0x80044323, 0x0)
sendmsg$nl_crypto(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f00000000c0)=0x3)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x40200)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0x80044323, 0x0)

07:52:31 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:31 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800000f", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:31 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x8100}, 0x0)

07:52:31 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb801}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:31 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x5, &(0x7f0000000280)=<r1=>0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x400000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffff5b)
r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={<r7=>0x0, 0x30, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000480)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000004c0)={r7, 0x1, 0x8}, &(0x7f0000000500)=0x8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_dump={0x3e, 0x2, 0x20, 0xbc, "ea37551259e086487a91c1ab0ac441a8ab884224ac651114ea21a972cbd25b7a31ddf98ace5e503320233841f1fca0031b90917a12016af531f298d69b7fd54e46f6ad2b6481ddc0ad84a103bd91ad73c3bd763e1859524ff3408aedd63f1c4b44a9633564afc98a53dc2b29876979639af48c8b458cbf0859c185cb6d76eb7d022de3d4b29b4d853c78c2a27ff41eaa1f632c62a006008fee8e42ffd27c123b40bba492bd6b4df0dc902c8e8ad48722eab739039585964aefee2340"}})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xff8b)
setresuid(0x0, r8, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])

07:52:31 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = dup3(r5, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:31 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000010", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r10=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x46)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
r11 = dup3(0xffffffffffffffff, r2, 0x80000)
ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f0000000040)=""/155)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:31 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r1)
syz_open_procfs(r1, &(0x7f0000000040)='attr/prev\x00')
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@cswp={0x58, 0x114, 0x8, {{}, &(0x7f0000000640), 0x0}}], 0x58}, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000000140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
r10 = accept4$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x800)
fsetxattr$trusted_overlay_redirect(r10, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0)

07:52:31 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xf000}, 0x0)

07:52:31 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3261.096683] atomic_op 000000004aa09cc1 conn xmit_atomic           (null)
[ 3261.193973] atomic_op 00000000cfddbf03 conn xmit_atomic           (null)
07:52:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup2(0xffffffffffffffff, r1)
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000240))
r3 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
getsockopt$inet_mreq(r3, 0x0, 0xaae8671e9fc71994, &(0x7f00000001c0)={@multicast2, @broadcast}, &(0x7f0000000200)=0x8)
sendto$inet(r3, &(0x7f0000000100)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$dupfd(r5, 0x0, r5)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@can_newroute={0x2c, 0x18, 0x5, 0x0, 0x0, {}, [@CGW_MOD_SET={0x18, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "abeee6a3d98900"}, 0x1}}]}, 0x2c}}, 0x0)

07:52:32 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:32 executing program 3:
open(&(0x7f0000000000)='./file0\x00', 0x204c2, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video35\x00', 0x2, 0x0)
syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}})
r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r4 = dup2(r3, r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000200)={0x3, 0x3, 0x8001, 'queue0\x00', 0x8})

07:52:32 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:32 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000060", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

[ 3261.573845] use of bytesused == 0 is deprecated and will be removed in the future,
[ 3261.631061] use the actual size instead.
[ 3261.634239] audit: type=1804 audit(1574149952.447:10279): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir319098978/syzkaller.qomjOF/4250/file0" dev="sda1" ino=16555 res=1
07:52:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgrp(0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x148, 0x18, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@typed={0x8, 0x7f, @fd=r0}, @typed={0x8, 0x3b, @pid=r1}, @generic="f3885eccfb4f089758341cbb353ed98997707b9d108e9ae405912739dfcb267d642e09921e99eb6e0ecd62aeb45448f1634f2244e301c6c9997969c202124c2ebfcba3e134edc9255eb5e8a7ec6f5634b6aa98450d24e50ed31cb51e753167ebc3b36dcbb5e3ddb27e8419e07354a162c94a6e8c18494760f0fcce702d3492fa5d8b304dde7e18e326de7edade4a817262cba59ad39d164d1cdc1c53c38b8ca01dbfdef4dcccd6c3cdd55127df7e0138e63202059252f128f710a237ac531686e2effc4e8e104812b9f346dc2b0018eb3f68c7dd221b6269868a7421d8966b6e3e", @typed={0x8, 0x8c, @fd=r3}, @typed={0x8, 0x83, @str='\x9a\x00'}, @typed={0x4, 0x4}, @generic="bdec56020e35f0b8e7fc2d058ee9fea4e6d4302ea17a543093a958d4c7988670cff32f35aa782829fef91b90b4"]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x38010)

07:52:32 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x34000}, 0x0)

07:52:32 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:32 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
flistxattr(r0, &(0x7f0000000100)=""/54, 0x36)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000180)={0xc, @output={0x2000, 0x0, {0x7, 0x1}, 0x7, 0x8000}})
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
r8 = dup(r3)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000140)={'bpq0\x00', @random="e3acff2ea73e"})
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000035008151e00f8000db4cb904044865160b00030000371a1500cd5edc2976d153b4000000000000000000", 0x2e}], 0x1}, 0x0)

07:52:32 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000440)={0x44e6eaa83f5ae3f4, 0x0, 0x2080, {0x3000, 0xe000, 0x2}, [], "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", "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"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000040)=""/250)
pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0)

07:52:32 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3262.106903] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3262.211072] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'.
07:52:33 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000080000f0", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:33 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000040))
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x4)
connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80)
sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0)
keyctl$revoke(0x3, 0x0)

07:52:33 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x400300}, 0x0)

07:52:33 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:33 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:33 executing program 1:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$inet6_int(r0, 0x29, 0x7a, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000240))

07:52:33 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd603}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:33 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:33 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0xf0ffff}, 0x0)

07:52:34 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd803}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000640), 0x12)
sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000140)={0x1ff, 0xffffffffffffffc1, 0x10001, 0x8})
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:52:34 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:34 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x1000000}, 0x0)

07:52:34 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:34 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:34 executing program 3:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x3f)
ptrace$peekuser(0x3, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1091, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000001d00000000d9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000000010000800000000000000000000800"/192])
bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e)
r2 = creat(0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
dup2(0xffffffffffffffff, r0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000080)={0x4f, &(0x7f0000000180)=""/79})
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0x73, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r3)

07:52:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
ioctl$TUNSETLINK(r0, 0x400454cd, 0xbac4bf7a4c47370)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040))
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)

[ 3264.094356] net_ratelimit: 6 callbacks suppressed
[ 3264.094364] protocol 88fb is buggy, dev hsr_slave_0
[ 3264.104448] protocol 88fb is buggy, dev hsr_slave_1
[ 3264.109601] protocol 88fb is buggy, dev hsr_slave_0
[ 3264.114721] protocol 88fb is buggy, dev hsr_slave_1
07:52:35 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:35 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x2000000}, 0x0)

07:52:35 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:35 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400000000000000000800008b", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:35 executing program 3:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/79, 0xffa0)
fcntl$getown(0xffffffffffffffff, 0x9)
open(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x46fb}, 0x8)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xa)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x101400)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = userfaultfd(0x0)
kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00WD%l\x8c\x8e3\xf1vS\xdeK8\xd6R\xbd\xd3\x199\'\x95J[>u\xd4l\x8c\xd3\xa6\xcf\xc99\xe0\xed^OM\x9a\xd8\xa2\xef\xee]\x11\xadD\xbe\xf7P:\xc5\xf4\xc2q', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/79, 0xffa0)
ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000400))
umount2(&(0x7f0000000240)='./file0\x00', 0x0)

07:52:35 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:35 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf203}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:35 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x3000000}, 0x0)

07:52:35 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf601}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=@newlink={0x64, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_NUM_RX_QUEUES={0x0, 0x20, 0x3}]}, 0x64}}, 0x0)

07:52:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x8001, 0x7, 0x6})
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x10400, 0x0)
r1 = socket(0x11, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc80582, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040))
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000200)={0xffff45d9, 0x0, 0x0, 0x23ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
r3 = syz_open_pts(r2, 0x0)
ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000000)={0xfff})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000), 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={<r10=>0x0, 0x0, r0})
r11 = socket$inet(0x2, 0x4000000805, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
r13 = dup3(r11, r12, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r14=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={r10, 0x0, r13})
r15 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)

07:52:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
pread64(r0, &(0x7f0000000200)=""/39, 0x27, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=<r4=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x400, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r7, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={r9, 0x7fff, 0x2, 0x0, 0xffffffff, 0x1508}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={<r10=>r7, 0x0, 0x2, 0xfff, 0x6, 0x3, 0x8df, 0x7, {r9, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x8}}, 0x8, 0x8001, 0x1, 0x0, 0x7}}, &(0x7f0000000140)=0xb0)
r11 = socket$inet(0x2, 0x4000000805, 0x0)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r11, r12, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="024526d3", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r12, 0xc0406619, &(0x7f0000000280)={{0x1, 0x0, @reserved="582e45a075baae08c878fa760a083b988f8d08b0addd2235e05d4a702ee1ae79"}})
getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r10, 0x5}, &(0x7f0000000240)=0x8)

07:52:36 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf603}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10)
close(r0)
bind(r0, 0x0, 0xfffffd40)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x1, {0x0, 0x9}, 0x1})
bind$llc(0xffffffffffffffff, 0x0, 0x0)

[ 3265.854554] protocol 88fb is buggy, dev hsr_slave_0
[ 3265.859748] protocol 88fb is buggy, dev hsr_slave_1
[ 3266.154533] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.159688] protocol 88fb is buggy, dev hsr_slave_1
[ 3266.167957] device bond0 entered promiscuous mode
[ 3266.172868] device bond_slave_0 entered promiscuous mode
[ 3266.178556] device bond_slave_1 entered promiscuous mode
[ 3266.184990] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 3266.191100] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3266.224377] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.229499] protocol 88fb is buggy, dev hsr_slave_1
07:52:37 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf803}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:37 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:37 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:37 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc02}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:37 executing program 0:
r0 = socket$inet6(0xa, 0x20000000080002, 0x88)
bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
recvfrom$ax25(r1, &(0x7f0000000140)=""/185, 0xb9, 0x2040, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x10001, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
read(r0, &(0x7f0000000080)=""/132, 0x397)
shutdown(r0, 0x0)

07:52:38 executing program 4:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0)
pivot_root(0x0, &(0x7f0000000080)='./file0\x00')
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}, 0x1, 0x4000000}, 0x0)

07:52:38 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

07:52:38 executing program 0:
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)
sched_setscheduler(0x0, 0x0, &(0x7f0000000380))
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14)

07:52:38 executing program 2:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setsig(r0, 0xa, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000300)="afbd19eb4c0037078eea7bf6c2c3121867199e68d470e296dc2bd42b5caf1fd60d3082c622e232c1f6ab4fb7c25b4821f68c8b1f2a2c5e38a43a5e4695f68e2fe226d926f84118c128c200d277dc55ee860114f80d2c2bad9c6f30a0484ce62728c62a9487994c4103182f4b2c47d1e49941bf67f16a8f2f3b6f"}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r8, @ANYBLOB="eeffff03000000000000214146120281ffff"], 0x20}}, 0x0)

07:52:39 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x100000000, 0x99b00)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x4})
pread64(r1, &(0x7f0000000080)=""/40, 0xbd, 0x800)

07:52:39 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 3269.190636] IPVS: ftp: loaded support on port[0] = 21
[ 3269.525841] device bridge_slave_1 left promiscuous mode
[ 3269.531462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3269.575074] device bridge_slave_0 left promiscuous mode
[ 3269.580584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3413.134508] INFO: task kworker/1:1:14364 blocked for more than 140 seconds.
[ 3413.141693]       Not tainted 4.19.84 #0
[ 3413.150187] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3413.158269] kworker/1:1     D26384 14364      2 0x80000000
[ 3413.163936] Workqueue: events switchdev_deferred_process_work
[ 3413.174399] Call Trace:
[ 3413.177045]  __schedule+0x866/0x1dc0
[ 3413.180774]  ? pci_mmcfg_check_reserved+0x170/0x170
[ 3413.189328]  ? kasan_check_read+0x11/0x20
[ 3413.193509]  schedule+0x92/0x1c0
[ 3413.198209]  schedule_preempt_disabled+0x13/0x20
[ 3413.202980]  __mutex_lock+0x726/0x1300
[ 3413.210531]  ? rtnl_lock+0x17/0x20
[ 3413.214100]  ? mutex_trylock+0x1e0/0x1e0
[ 3413.219516]  ? perf_trace_lock+0x510/0x510
[ 3413.223788]  ? process_one_work+0x890/0x1750
[ 3413.232617]  ? __lock_is_held+0xb6/0x140
[ 3413.238030]  mutex_lock_nested+0x16/0x20
[ 3413.242119]  ? mutex_lock_nested+0x16/0x20
[ 3413.249836]  rtnl_lock+0x17/0x20
[ 3413.253222]  switchdev_deferred_process_work+0xe/0x20
[ 3413.259751]  process_one_work+0x989/0x1750
[ 3413.264016]  ? pwq_dec_nr_in_flight+0x320/0x320
[ 3413.272479]  ? lock_acquire+0x16f/0x3f0
[ 3413.277890]  ? kasan_check_write+0x14/0x20
[ 3413.282142]  ? do_raw_spin_lock+0xc8/0x240
[ 3413.289883]  worker_thread+0x98/0xe40
[ 3413.293721]  kthread+0x354/0x420
[ 3413.298481]  ? process_one_work+0x1750/0x1750
[ 3413.303000]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 3413.311831]  ret_from_fork+0x24/0x30
[ 3413.316994] INFO: task syz-executor.3:8776 blocked for more than 140 seconds.
[ 3413.327755]       Not tainted 4.19.84 #0
[ 3413.331975] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3413.341438] syz-executor.3  D24152  8776      1 0x00000004
[ 3413.350678] Call Trace:
[ 3413.353301]  __schedule+0x866/0x1dc0
[ 3413.359285]  ? __mutex_lock+0x721/0x1300
[ 3413.363374]  ? pci_mmcfg_check_reserved+0x170/0x170
[ 3413.371868]  ? kasan_check_read+0x11/0x20
[ 3413.378810]  schedule+0x92/0x1c0
[ 3413.382244]  schedule_preempt_disabled+0x13/0x20
[ 3413.390501]  __mutex_lock+0x726/0x1300
[ 3413.395776]  ? rtnetlink_rcv_msg+0x40a/0xb00
[ 3413.402961]  ? mutex_trylock+0x1e0/0x1e0
[ 3413.410547]  ? rtnetlink_rcv_msg+0x3d0/0xb00
[ 3413.416313]  ? lock_downgrade+0x880/0x880
[ 3413.420482]  mutex_lock_nested+0x16/0x20
[ 3413.428016]  ? mutex_lock_nested+0x16/0x20
[ 3413.432360]  rtnetlink_rcv_msg+0x40a/0xb00
[ 3413.437920]  ? rtnetlink_put_metrics+0x560/0x560
[ 3413.442710]  ? perf_trace_lock_acquire+0xf5/0x580
[ 3413.451073]  ? netlink_deliver_tap+0x22d/0xc20
[ 3413.456989]  ? find_held_lock+0x35/0x130
[ 3413.461072]  netlink_rcv_skb+0x17d/0x460
[ 3413.468760]  ? rtnetlink_put_metrics+0x560/0x560
[ 3413.473569]  ? netlink_ack+0xb30/0xb30
[ 3413.478888]  ? kasan_check_read+0x11/0x20
[ 3413.484194]  ? netlink_deliver_tap+0x254/0xc20
[ 3413.496557]  rtnetlink_rcv+0x1d/0x30
[ 3413.500473]  netlink_unicast+0x537/0x720
[ 3413.504847]  ? netlink_attachskb+0x770/0x770
[ 3413.509278]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3413.515074]  netlink_sendmsg+0x8ae/0xd70
[ 3413.519158]  ? netlink_unicast+0x720/0x720
[ 3413.523407]  ? selinux_socket_sendmsg+0x36/0x40
[ 3413.528323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3413.533878]  ? security_socket_sendmsg+0x8d/0xc0
[ 3413.540102]  ? netlink_unicast+0x720/0x720
[ 3413.544549]  sock_sendmsg+0xd7/0x130
[ 3413.548279]  __sys_sendto+0x262/0x380
[ 3413.552087]  ? __ia32_sys_getpeername+0xb0/0xb0
[ 3413.557017]  ? lock_downgrade+0x880/0x880
[ 3413.561189]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3413.566907]  ? __fd_install+0x200/0x640
[ 3413.570901]  ? fd_install+0x4d/0x60
[ 3413.574882]  ? __sys_socket+0x180/0x220
[ 3413.578949]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3413.583710]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3413.588939]  ? do_syscall_64+0x26/0x620
[ 3413.592929]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3413.599673]  __x64_sys_sendto+0xe1/0x1a0
[ 3413.603762]  do_syscall_64+0xfd/0x620
[ 3413.611001]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3413.618506] RIP: 0033:0x414333
[ 3413.621716] Code: 1f 84 00 00 00 00 00 bf b5 30 44 00 b9 18 00 00 00 48 89 d6 f3 a6 75 0c 48 c7 00 30 41 41 00 e9 3b ff ff ff 48 83 ec 08 31 c0 <48> 89 d6 bf 30 31 44 00 e8 f0 cc 00 00 b8 14 fc ff ff 48 83 c4 08
[ 3413.641239] RSP: 002b:00007fff47f14b38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 3413.649134] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414333
[ 3413.656669] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003
[ 3413.663956] RBP: 0000000000000000 R08: 00007fff47f14b40 R09: 000000000000000c
[ 3413.671417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3413.679287] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003
[ 3413.686825] 
[ 3413.686825] Showing all locks held in the system:
[ 3413.693163] 4 locks held by kworker/u4:3/125:
[ 3413.697916] 1 lock held by khungtaskd/1039:
[ 3413.702241]  #0: 00000000a68bb42e (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e
[ 3413.711163] 4 locks held by rs:main Q:Reg/7424:
[ 3413.716049] 1 lock held by rsyslogd/7426:
[ 3413.720195]  #0: 00000000c3478e3a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[ 3413.728533] 2 locks held by getty/7549:
[ 3413.732520]  #0: 000000008114a0e6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.741063]  #1: 00000000d86ee2da (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.752492] 2 locks held by getty/7550:
[ 3413.759923]  #0: 00000000c2514228 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.769510]  #1: 000000008e85ba2e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.783079] 2 locks held by getty/7551:
[ 3413.789084]  #0: 0000000054428cd4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.797635]  #1: 00000000b32c18ee (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.806768] 2 locks held by getty/7552:
[ 3413.812751]  #0: 000000003ec3f902 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.821253]  #1: 000000009b374294 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.830376] 2 locks held by getty/7553:
[ 3413.834515]  #0: 00000000926a75da (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.842794]  #1: 0000000052450954 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.851902] 2 locks held by getty/7554:
[ 3413.856235]  #0: 00000000a77ec854 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.864712]  #1: 000000003569ecdd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.873605] 2 locks held by getty/7555:
[ 3413.878684]  #0: 0000000085d6b56a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[ 3413.888274]  #1: 00000000b8e9bde9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30
[ 3413.900646] 3 locks held by kworker/1:1/14364:
[ 3413.906544]  #0: 0000000095cd8f1d ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750
[ 3413.916114]  #1: 00000000245c3bb3 (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1750
[ 3413.925513]  #2: 0000000011991f47 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20
[ 3413.932850] 3 locks held by kworker/1:3/17541:
[ 3413.937647]  #0: 0000000095cd8f1d ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750
[ 3413.947168]  #1: 00000000ac606760 ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1750
[ 3413.956502]  #2: 0000000011991f47 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20
[ 3413.963844] 3 locks held by kworker/0:3/4968:
[ 3413.968568]  #0: 00000000655efbf7 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750
[ 3413.979381]  #1: 0000000090de1513 ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1750
[ 3413.989957]  #2: 0000000011991f47 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20
[ 3414.000739] 1 lock held by syz-executor.3/8776:
[ 3414.007675]  #0: 0000000011991f47 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00
[ 3414.016185] 
[ 3414.017813] =============================================
[ 3414.017813] 
[ 3414.025124] NMI backtrace for cpu 0
[ 3414.028766] CPU: 0 PID: 1039 Comm: khungtaskd Not tainted 4.19.84 #0
[ 3414.035259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3414.044611] Call Trace:
[ 3414.047210]  dump_stack+0x197/0x210
[ 3414.050844]  nmi_cpu_backtrace.cold+0x63/0xa4
[ 3414.055415]  ? lapic_can_unplug_cpu.cold+0x47/0x47
[ 3414.060436]  nmi_trigger_cpumask_backtrace+0x1b0/0x1f8
[ 3414.065721]  arch_trigger_cpumask_backtrace+0x14/0x20
[ 3414.070912]  watchdog+0x9df/0xee0
[ 3414.074379]  kthread+0x354/0x420
[ 3414.077750]  ? reset_hung_task_detector+0x30/0x30
[ 3414.082603]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 3414.088161]  ret_from_fork+0x24/0x30
[ 3414.092006] Sending NMI from CPU 0 to CPUs 1:
[ 3414.096859] NMI backtrace for cpu 1
[ 3414.096864] CPU: 1 PID: 26895 Comm: kworker/u4:0 Not tainted 4.19.84 #0
[ 3414.096870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3414.096874] Workqueue: bat_events batadv_nc_worker
[ 3414.096881] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0xe/0x20
[ 3414.096891] Code: 48 89 fe bf 06 00 00 00 48 89 e5 48 8b 4d 08 e8 18 ff ff ff 5d c3 66 0f 1f 44 00 00 55 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 <48> 89 e5 48 8b 4d 08 e8 f6 fe ff ff 5d c3 0f 1f 40 00 55 0f b7 d6
[ 3414.096895] RSP: 0018:ffff88802a117cd0 EFLAGS: 00000246
[ 3414.096903] RAX: 0000000000000001 RBX: ffff888032ee2f40 RCX: ffffffff81595911
[ 3414.096908] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001
[ 3414.096912] RBP: ffff88802a117d30 R08: 1ffff11015d24732 R09: ffffed1015d24733
[ 3414.096917] R10: ffffed1015d24732 R11: ffff8880ae923993 R12: 0000000000000001
[ 3414.096922] R13: 0000000000000256 R14: 0000000000000001 R15: dffffc0000000000
[ 3414.096927] FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[ 3414.096932] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3414.096937] CR2: 000000c42ffb32d8 CR3: 000000008fb4e000 CR4: 00000000001406e0
[ 3414.096942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3414.096946] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3414.096949] Call Trace:
[ 3414.096953]  ? batadv_nc_worker+0x491/0x760
[ 3414.096956]  process_one_work+0x989/0x1750
[ 3414.096960]  ? pwq_dec_nr_in_flight+0x320/0x320
[ 3414.096963]  ? lock_acquire+0x16f/0x3f0
[ 3414.096967]  ? kasan_check_write+0x14/0x20
[ 3414.096970]  ? do_raw_spin_lock+0xc8/0x240
[ 3414.096974]  worker_thread+0x98/0xe40
[ 3414.096977]  kthread+0x354/0x420
[ 3414.096980]  ? process_one_work+0x1750/0x1750
[ 3414.096984]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 3414.096988]  ret_from_fork+0x24/0x30
[ 3414.098108] Kernel panic - not syncing: hung_task: blocked tasks
[ 3414.279714] CPU: 0 PID: 1039 Comm: khungtaskd Not tainted 4.19.84 #0
[ 3414.286213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3414.295569] Call Trace:
[ 3414.298248]  dump_stack+0x197/0x210
[ 3414.302319]  panic+0x26a/0x50e
[ 3414.305531]  ? __warn_printk+0xf3/0xf3
[ 3414.309438]  ? lapic_can_unplug_cpu.cold+0x47/0x47
[ 3414.314382]  ? ___preempt_schedule+0x16/0x18
[ 3414.318808]  ? nmi_trigger_cpumask_backtrace+0x165/0x1f8
[ 3414.324267]  ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8
[ 3414.329722]  ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8
[ 3414.335180]  ? nmi_trigger_cpumask_backtrace+0x165/0x1f8
[ 3414.340770]  watchdog+0x9f0/0xee0
[ 3414.344241]  kthread+0x354/0x420
[ 3414.347610]  ? reset_hung_task_detector+0x30/0x30
[ 3414.352455]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 3414.358002]  ret_from_fork+0x24/0x30
[ 3414.363105] Kernel Offset: disabled
[ 3414.366802] Rebooting in 86400 seconds..