P(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup3(r4, r5, 0x0)
dup2(r7, r6)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

18:19:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:37 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:37 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000180)={0x9, 0x1, 0x8, 0x6, 0x3, 0x949})
r1 = socket$inet6(0xa, 0x1, 0x7)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x4, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f00000000c0))
socket$inet(0x2, 0x80000, 0x1)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f0000000080)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @broadcast}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:37 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:37 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:37 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}, 0x3}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
dup(r6)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x1f, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@ipv4={[], [], @loopback}, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:38 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:38 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0020001000010800000000000000000000000065473305319d01dcac8eafaa5e2ea7f0ea343f3c713f90db9d6fce692f8c521b45a934f61dca7a79ab7c17fae404e94bfaaa67d86e7f8f6177fa10b60436bfba7b0c4010b38913eb77fd35d96e8f59df9cff0123802b5baf44073958daf42fe307bf705617e82b04bfd1f3d9e7c2209bb5dadef865852b60345c89dac23826f478db0a60f429542cf363e4701b44727db18c7beef8917fa3124eb20fe128ec2992a6a07c3c0cd334423a725fa18023222c", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:38 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:38 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xd, r2, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:19:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:38 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400000, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
renameat(r3, &(0x7f00000000c0)='./bus\x00', r4, &(0x7f0000000180)='./bus\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:19:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)

18:19:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:39 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e0000000400000090030000a8010000d800000000000000d800000000000000c0020000c0020000c0020000c0020000c002000004000000", @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="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"], 0x3f0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:19:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:39 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000008044600b4d5c76ba4483dda0700fe800000000000003f6e00000000000000bbad7755db1b9d71363e2e34a5cb57fbb8b0cf31ce3859b2c43439a44e6b47037bd54ddb453b8313f639bcd7b9418d53c35dc2d82bb57540"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:40 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:40 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)

18:19:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:40 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000001300))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:40 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:41 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00fdff10000108000000000000040000000000", @ANYRES32=r8, @ANYBLOB="00000047dda675f88c6e0bfde966bfff00000000f3137673c61aab60a3ae3ed64a14fe6c7a84e6683f585f2d999af47cbfb0c6f417e575dfc2474fdfdf07896bcd16088942edc7242c95e24a8f9dd220017f925cb5f0ea9c26d9a9510f1e9a94011fb71262829feec86ab0aaf698efc1f995921c905d0d116fd7701a89b65c52c8ace38525eaa8eb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x7}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000001300), 0x0, 0x9)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
dup(r4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000100)=0x9, 0x4)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r7, 0x0, 0x8000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x6, @rand_addr="4d3537489ccc8aa167e35206454b955a", 0x5}, @in={0x2, 0x4e21, @loopback}], 0x4c)

18:19:41 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)

18:19:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:41 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r11 = getpid()
r12 = syz_open_procfs(r11, &(0x7f0000000140)='limits\x00')
preadv(r12, &(0x7f00000017c0), 0x375, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r13, 0x0, 0x8000)

18:19:41 executing program 4:
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x7f, 0x0, 0x0, 0xa}, {0x80000006, 0x0, 0x1, 0x40}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = dup(r0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r7}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r8, 0x7fff)
sendfile(r2, r8, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:41 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:41 executing program 3:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000014c0)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001480)='mounts\x00', 0xffffffffffffffff}, 0x30)
prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x79)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000001300)=""/105, 0x69}, {&(0x7f00000013c0)=""/72, 0x48}], 0x3)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xe0, 0x90401)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0x1, 0x0, 0x6, 0xbf}, 0x8)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$rds(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaa80000000aebccbbd0008004600002c0000000000069078ac1414bbac1e0001440400000400006d000080ffffffff4345ae958588234595da3a69edfeb1e5a2422ba4793fc2a6eb31b584d6f48acd7224cc36c5bdff79fbc408e61e18c8f5873405000000000000003652b840dcdb4ee9cebdb7aa83dd51101cf8a168f47433b727a932936210a51e84c45af72596bc299ed4479df670e7ec66269822cd2e82cecb9565d76c9c86b3587bd3c5d16356fc2da1a3a920bfdfffd517d300"/213, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000005d7800007fcfb116b422ebdbbc3545f1ee25c6f4738c8da15d6ff3ed8a4f3a328dc615aa52c9b728a618e85f31102ce275d4a1ff95185f4c2dac3caaa132db8ec0ec4ac7774eb4445a984f3c2761a9d6461173ec896cd2238028a73517d333f9ffcb3838c59481ba4515fe3e"], 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)

18:19:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r7, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x8300, 0x0, <r8=>0x0, 0x0, &(0x7f00000000c0)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x9, 0x4, 0x2}, &(0x7f0000001300)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=0x1f}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={r6, 0x10, &(0x7f0000001580)={&(0x7f00000013c0)=""/169, 0xa9, r8}}, 0x10)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001600)="313f1857a253ff010000551858ba8c85cb8c222104a1b43812ed5feeccc72b66", 0x20}, {&(0x7f00000016c0)="d8a930147c46959f2af9d87658dc0b3906ba1bf19f930ce9602c97205c35054cd304f127", 0x24}], 0x2, 0x0)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:19:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:42 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001, 0x0, 0x0, 0x7}, {0x0, 0x9, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bbc, 0x1, 0x0, 0x3}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x71}}, 0xe8)
sendmmsg(r3, &(0x7f0000000000), 0x0, 0x2000bed0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {0x4}, 0x0, 0xffffffff, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfec0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xfec0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
connect$inet6(r1, 0x0, 0xffffffffffffffc7)
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c002021d52adf4e1291640010000100"/27, @ANYRES32=r12, @ANYBLOB="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"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r12}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x0, 0x0, 0x96, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r13 = open(&(0x7f0000000040)='./bus\x00', 0x141243, 0x8)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r13, 0x7fff)
sendfile(r5, r13, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r11 = getpid()
r12 = syz_open_procfs(r11, &(0x7f0000000140)='limits\x00')
preadv(r12, &(0x7f00000017c0), 0x375, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r13, 0x0, 0x8000)

18:19:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

[  970.699751] selinux_nlmsg_perm: 20 callbacks suppressed
[  970.699813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10965 sclass=netlink_route_socket pig=14631 comm=syz-executor.4
18:19:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001300)={0xffff, 0x0, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0xc, 0x20, 0x5, 0x3, 0x20, "c3c09588"}, 0x7ff, 0x4, @offset=0x7fffffff, 0x3, 0x0, <r3=>0xffffffffffffffff})
connect$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r11 = getpid()
r12 = syz_open_procfs(r11, &(0x7f0000000140)='limits\x00')
preadv(r12, &(0x7f00000017c0), 0x375, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r13, 0x0, 0x8000)

18:19:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$setpipe(r9, 0x407, 0x0)
write(r9, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$setpipe(r10, 0x407, 0x0)
write(r10, &(0x7f0000000340), 0x41395527)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000180)={<r11=>0x0, 0x9, 0x20, 0x2, 0x2}, &(0x7f0000001300)=0x18)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000013c0)={<r12=>r11, 0x80, "71e503525e8ca1ce08de7571783263950bea7a43972993c6d8dc8a8102d7b0d4eb94339d2e17bce35d1890297f61d3b92634c61c007ed6d684d487f67baadc4103f844b12cf4fc9036ff44ae37a55d6ac8efae550f71800436af1ca63ed81d5297bfcd1eea02e3c185e6d58a8a27c0249212ad0ad20459804f5d9bb5b189e05b"}, &(0x7f0000000080)=0x88)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000000c0)={r12, 0x9}, 0x8)

18:19:43 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r4 = dup(r1)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r9}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r10, 0x7fff)
sendfile(r4, r10, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:44 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0020001000b3862484a781f9d0688a4f470108000000408f00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a0714000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, 0x0, &(0x7f000034f000))
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x1250c2, 0x22)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000001300)="e1d2b236632d73de9d89d5e5935dda665a310836bc0e3bb376025e2abd", 0x1d}], 0x61, 0x4)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

[  972.654820] audit: type=1800 audit(1583864384.874:12344): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=17023 res=0
18:19:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:45 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2093, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe650000000000f7ffffff00e4ecb62f"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xfffe, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0xa97f, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0x9}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04)
open_by_handle_at(r7, 0x0, 0x8000)

18:19:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, 0x0, &(0x7f000034f000))
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:45 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0xa, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYPTR64, @ANYRESDEC=r9], 0x3}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r10 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r10, 0x7fff)
sendfile(r3, r10, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, 0x0, &(0x7f000034f000))
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1fe, 0x480000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000000c0)={0x0, 0xffffffff80000001, 0xbd3e, 0x1})
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:46 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x202a00, 0x0)
r3 = perf_event_open(0x0, 0x0, 0x1, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3)
r4 = dup(r1)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r9, @ANYBLOB="00000000f5ff000000000000004ce7e9ad000000001c001a8018000a8014000700fe8000000000000000000000dc4ff718000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r9}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r10, 0x7fff)
sendfile(r4, r10, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, 0x0)
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x100000000, 0x8)

18:19:47 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:47 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0xa, 0xfe)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x80000, 0xb)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:47 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000080)={0x1})
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xfec0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=0xfffffffe)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:19:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, 0x0)
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:47 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:48 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
r2 = dup(r1)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x8, r3, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0020001000010800f5ffffffffffff1f000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
ftruncate(r9, 0x7fff)
sendfile(r2, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xfffffffffffffbff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000140)=0x400000000002127, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0xb, 0x200)
readv(r7, &(0x7f0000000700), 0x0)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000023c0)=""/4110, 0x100e}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/22, 0x16}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/43, 0x2b}], 0xa, 0x0)
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
r9 = dup(r8)
setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x120)
pipe(&(0x7f0000000140)={<r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

18:19:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, 0x0)
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

18:19:48 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0020001000010800000000000000000000000075d2db481dd842158a0741fc7aca719a504d94b12813021cf5bb9ab46b94a6431a2b8e38cc0d14ba959887bebb419600abf7490a222af36142f64d45d8907a87d3a43b8b2224aca9f235eb1081c6f0e94625093267e355cabd857a3c711eb63e2ffb7502206922f775433629679e95b11c410ad7a67b2c6600e9bd0f268adf7201", @ANYRES32=r8, @ANYBLOB="000000000040001c9a876407ea2fcb5335db2bc106ef6da7002f8018000a8014000700fe8000000000000000000900000000bb64dd1f1e400dc7f63ee095957c0f2b56ded3876c96b8beebad85e13c975bd038f7f76c0ec5d71412cef73f12104f42f50cb57410e09dcd220d82a52d7dd8b43a6319422918ad8dc75309fb104bfff66d9a5ccabbf5d0427dc9c29beabe4b742ad06548376fd824481bb6c21fcd2d2b35a603c62b84c71a03afce61efb4de3966add5ef3b80b1b67238052b42aee5df47ab7be4fce8388fdff20475a84768efba3057ba8953c74757ec18776e5214c2118d4f06616650a7715d4ac9da6a3ed10b4c8a1daeb96475c3047e577426594917d292ec9ff43efa3535c3c3e46a29da42fe0c2c0157ae8142ac5ec79ec16a585e32f928632e57afbe01bcb931a4c31e376e1b2b2a493f1b5eed63a001250bbb494aca5ef4fa7e9471b9a5eeb9b6bb423574232df0654b968d66e054d8077c4b0bb0b6bff1698f83985fb87d62aef391384eb8ceb9ca090c5944aca4dc4988306b174b0ea6ba3f8dd01960550cd825f2ff47eff541ff9885048a4d01d996d522ea22e7cf5a6e5ad2c7e24692e89a7372407926c5e8af68b630c9bb6e7b6f036e74d1ed6b9030d2805cadbc432856350f27d694"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x3, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:48 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x101, 0x20c242)
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000001300)=ANY=[@ANYBLOB="05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00"/88])
dup(r4)
r6 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x8002, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000100), 0xfffffffffffffdf3)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0xa102)

18:19:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:49 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

18:19:49 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={<r1=>r0, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f00000000c0)='system_u:object_r:faillog_t:s0\x00'}, 0x30)
prlimit64(r1, 0xa, &(0x7f0000001300)={0x9, 0x10008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffff7fffffff}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r4, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x80000, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f00000013c0)="b4c8a0a3fed5b1dfb924eac3ff2f69713d07005e34b10a37543ecccde609b7804c23316443ac0401659fef85e6acdc6ee6cbaa40d666ffdbbbdee7fb87e804a5f3769f53d92dc4905870a9b5e5b5dfec1a48cbc046d00d966a07f292eb478185f6c13522b689d25d38ca5537005eee714f241ae9e8ce0345e6b582c221ad23006c196bb1d35ad477f7faec9fd5f3d677ecb2cf601f061cc9b21918a4319d390dde6ffb2e56c52268adc592533682a015ba2a7532cf4a87cf81ae010e6f9756a42bb565013c50c67b63d0bd49d04d1c99263393c317c8d10a36edd12517b45d10bf4b726c16cd328b7e67d201ff45", 0xee}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$setpipe(r11, 0x407, 0x0)
write(r11, &(0x7f0000000340), 0x41395527)
write$selinux_context(r11, &(0x7f0000000080)='system_u:object_r:faillog_t:s0\x00', 0x1f)

18:19:49 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

18:19:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:49 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f00007b1000)=0x200, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0xb, 0x7)
connect$inet6(r4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r8 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2d54b4f0681b579997f5fdab6b0429004fa69e380ea6d70e5c", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC=r8, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYPTR64, @ANYPTR64, @ANYRES32, @ANYRES32], @ANYRESHEX=r9], @ANYBLOB="000000000000004401000000000d4b0d0f59fbab001a8005000000"], 0x3}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, r7}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
socketpair(0x2, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$inet6_tcp_int(r11, 0x6, 0x7, &(0x7f0000000440), &(0x7f0000000240))
ftruncate(r10, 0x7fff)
sendfile(r3, r10, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:49 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:49 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:50 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:50 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00200010000108000000000000000000000000ad0a3255e0de76d8b197ec8f3b187b9d83db3227bb644696708a76ad216c964d086392ea52306cfba5cc11a9d335f51d357a4520152b58841c6aa8a17b141f0732a20479c862e0b6c7bc335ac806a030a12e775f5998ad91b4bbd43a3f1be3e9f7948dddd1a557e0887d5d845099f5874ae7e421a8e63a76a52c17ac181e44800f5eda689a1c277dd9c0f46f862c769d16ec898260d4387fb0304c20f5d106655ed03fa6e7b9c1b858d63025067598e09ae14978f88c4a95ffdbd07979281a49d57c6b808a11cf8ca555faf99b6f", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r5, &(0x7f00000017c0), 0x375, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r6, 0x0, 0x8000)

18:19:50 executing program 0:
r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e1696f388922880f42e67dabb06565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940ebea689162949f0e102da9edd02e3913d84945b63c470000000000003de33a904c0000000000000000005ddc15e483c01e3c563b6deb0aff50dc1aabbc77c3a92cd8839726d59c597a3ada769aba4c3a53690500000000000000"], 0x1c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x12, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10)

18:19:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:50 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0020001000010800"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014002900fe8000000000000000000000009d3a0000bb66028af3e185397986d1c94d53389af69272f8f9c1bdaa42b800e637c8a98c4bb0e9d77f75f967d90aa8b2edff295b72955b2e54b7b0bfbf3d7bf2b5f4a70fd9228911eb22"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xaa804080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x8a000, 0x0)
readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4094, 0xffe}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f00000000c0)={0x3, 0x0, 0x9, 0x10000, 0x8001})
socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:50 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f00000000c0))

18:19:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:51 executing program 0:
getpriority(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001a000507d21080648c63940d0124fc60100002400a000200053582c137153e370a0003800b000000d1bd", 0x33fe0}], 0x1}, 0x0)
socket(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

18:19:51 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00200010000108000000000000220000000000", @ANYPTR64, @ANYBLOB="00000000000000001c00007a18008000000000001f00000000000000bb00000000000000"], 0x3}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r10, 0x7fff)
sendfile(r3, r10, &(0x7f0000d83ff8)=0x6, 0x8000fffffffe)

18:19:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90)

18:19:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:51 executing program 0:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
fdatasync(r0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
clone(0x80080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

18:19:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000001a40)=""/238)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r9, 0x0, 0x0)
ioprio_set$uid(0x3, r9, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r10, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@remote, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x6, &(0x7f00000017c0)=[{&(0x7f00000013c0)="efa7fb7b83cf91c4791f4d983251e00cdfda436ce8cabdab6f30a24924c714781d4264e73534ba7104d335d7157ba74a8ad5f04676b7731cfaf2b4d7a8800ba675480f29e3c18e443978e9c2fae0b3ed85069a5750ef9c8a49145853bd3871e8a34ede60c8787181b4c1aead451a258c86292ae0ad8550d507633387334f8ba28af701c7688efba93f17fe98f971666861588fe86b34122a4f6dfd1f6038d5117dc272077f0c12811c282565f799ff4d02331a674e1b04426ba9c050c6d8739961481ccd4b57afad350bc3e0e035b8d91106e8d969fcd9653e48fdf5d5ef168e4c8c5361c0c5445a2f60c812", 0xec, 0xffffffff}, {&(0x7f0000002380)="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", 0x1000, 0x4}, {&(0x7f00000014c0)="6894019d74d4a26b8b931a82c174cab4f88982a692d14032ee0ee1726b4959300025c4ab4dad37bc38b4cc7c81a1527ad885ad4261c33d30dcd62a71190825b7f9c9f79d00c72df053872a980302c01831a894908807c3fc68d87d84aa7078f26c135f614a4e67c0fdc92db54033b6e7fd5427b4298658ae5d6785636f0ab8ccb965f25fe67868ee9c3f1ad54b8fb614034cd5d67455d80729bb48586a85fe4a40bd6be87c344131769361c2a030d08bbbc3fbd61f223116f4819be9f78124054ad9f56d25607dee73", 0xc9, 0x3}, {&(0x7f0000001300)="4f77f15aec86a05121a4793f9f69cccab4aa689689c1449f696a450aafbd267b384b9ede208313ffecc5d62eb225834638f27ec46e150d05d2bce3957b562dc9524673c92c7e3dcff18ed431a3c231fecaee09d37a7bf76ae711f230e324fbb7fcb647c1dc745592ac505589", 0x6c, 0x4}, {&(0x7f00000015c0)="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", 0xfb, 0x7}, {&(0x7f00000016c0)="a091eb35597fae2f5f583d30251997c182e18bd91fcb41c46c04b97b5f7a249809062e89aecaac7cde446d9fc3c3afb7fbc695d284a7af25b517b777f617895b47af368ee3f27e4bed0762154b26b3857e9e66ad7cafba8e37d9b57838c2d872b32cf9308f10d1b2b907f834d2871eb97e009e350a4ec04f921765e440eb5ae9ead9808d1898555bc47f56a40710ac4eb6d99f4d7eda3a07aad6e01bfd069e38f141b630edfcb18ab4dc3a9b7b1f18862eadd8c28e5d528b4493ce855917d467637ba2460b4c280bcd9a8ad8ccc63a42466911c7876366ce5ca83622f07268f7938c7f49d9d32ccf0045247e9c0644f661f67c6d0227cb", 0xf7, 0x4}], 0x100000, &(0x7f0000001d00)=ANY=[@ANYBLOB='nobarrier,lazytime,uid=', @ANYRESDEC=0xee01, @ANYBLOB="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"])
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:19:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="10a8090000002ef30fc7b6feffffffb8003800000f23c00f21f835030009000f23f8670f01c32e363e0f214f66baf80cb8dc3e8388ef66bafc0ced26c6f84fea87a6c155c600e306c4c2253953c2", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:19:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:52 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, 0x0, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="10a8090000002ef30fc7b6feffffffb8003800000f23c00f21f835030009000f23f8670f01c32e363e0f214f66baf80cb8dc3e8388ef66bafc0ced26c6f84fea87a6c155c600e306c4c2253953c2", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:19:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x727}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x81, 0x4100)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001300)={0x7d80, 0x1, 0x4, 0x2000, 0x7, {r3, r4/1000+30000}, {0x5, 0x1, 0xfe, 0x7, 0x9, 0xff, "be4143a4"}, 0xa4c, 0x0, @offset=0x1d, 0x9914, 0x0, r5})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r6 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r6, &(0x7f00000017c0), 0x1a2, 0x0)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = dup(r7)
setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:19:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, 0x0, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:54 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)

18:19:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
ioctl$NBD_SET_SOCK(r2, 0xab00, r6)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:54 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)

18:19:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, 0x0, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:19:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:54 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)

18:19:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000003380)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
socket$inet6(0xa, 0x5, 0x1f)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e24, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000001a40)=""/238)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r9, 0x0, 0x0)
ioprio_set$uid(0x3, r9, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r10, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@remote, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./bus\x00', 0x6, 0x6, &(0x7f00000017c0)=[{&(0x7f00000013c0)="efa7fb7b83cf91c4791f4d983251e00cdfda436ce8cabdab6f30a24924c714781d4264e73534ba7104d335d7157ba74a8ad5f04676b7731cfaf2b4d7a8800ba675480f29e3c18e443978e9c2fae0b3ed85069a5750ef9c8a49145853bd3871e8a34ede60c8787181b4c1aead451a258c86292ae0ad8550d507633387334f8ba28af701c7688efba93f17fe98f971666861588fe86b34122a4f6dfd1f6038d5117dc272077f0c12811c282565f799ff4d02331a674e1b04426ba9c050c6d8739961481ccd4b57afad350bc3e0e035b8d91106e8d969fcd9653e48fdf5d5ef168e4c8c5361c0c5445a2f60c812", 0xec, 0xffffffff}, {&(0x7f0000002380)="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", 0x1000, 0x4}, {&(0x7f00000014c0)="6894019d74d4a26b8b931a82c174cab4f88982a692d14032ee0ee1726b4959300025c4ab4dad37bc38b4cc7c81a1527ad885ad4261c33d30dcd62a71190825b7f9c9f79d00c72df053872a980302c01831a894908807c3fc68d87d84aa7078f26c135f614a4e67c0fdc92db54033b6e7fd5427b4298658ae5d6785636f0ab8ccb965f25fe67868ee9c3f1ad54b8fb614034cd5d67455d80729bb48586a85fe4a40bd6be87c344131769361c2a030d08bbbc3fbd61f223116f4819be9f78124054ad9f56d25607dee73", 0xc9, 0x3}, {&(0x7f0000001300)="4f77f15aec86a05121a4793f9f69cccab4aa689689c1449f696a450aafbd267b384b9ede208313ffecc5d62eb225834638f27ec46e150d05d2bce3957b562dc9524673c92c7e3dcff18ed431a3c231fecaee09d37a7bf76ae711f230e324fbb7fcb647c1dc745592ac505589", 0x6c, 0x4}, {&(0x7f00000015c0)="dc84153c76efc0a012904350e65dddb0c4679ba2f59447ea0713907515411d1ce6bb93a6c3a23543db5be6b651326b3cad10f3fed91675fcaa9b8c898f9de451c1416d8ad6523da1851221bcae4025d8ab853ba6a96478cdb0f9eec78b3df696b2ba04365d8cc915df1925f8d0e08a0f9b821982c3eae215270d98594fe05b83c85d2a42e5f877caf9f20927b50aa6b8bf89521af1d32666fafdc8364fa549a33156a5ae074605e80646488dc7ed2e5733224a2cb3aa8a88dbfc0ece14d1ef1a1f14531c46ec7a6e4c37a3eb48fb044396159e0c013f2ebebc98d8d506aaab576fc1a45ac989e82bee51366b641ed9def03af4a21d8396ce280e71", 0xfb, 0x7}, {&(0x7f00000016c0)="a091eb35597fae2f5f583d30251997c182e18bd91fcb41c46c04b97b5f7a249809062e89aecaac7cde446d9fc3c3afb7fbc695d284a7af25b517b777f617895b47af368ee3f27e4bed0762154b26b3857e9e66ad7cafba8e37d9b57838c2d872b32cf9308f10d1b2b907f834d2871eb97e009e350a4ec04f921765e440eb5ae9ead9808d1898555bc47f56a40710ac4eb6d99f4d7eda3a07aad6e01bfd069e38f141b630edfcb18ab4dc3a9b7b1f18862eadd8c28e5d528b4493ce855917d467637ba2460b4c280bcd9a8ad8ccc63a42466911c7876366ce5ca83622f07268f7938c7f49d9d32ccf0045247e9c0644f661f67c6d0227cb", 0xf7, 0x4}], 0x100000, &(0x7f0000001d00)=ANY=[@ANYBLOB='nobarrier,lazytime,uid=', @ANYRESDEC=0xee01, @ANYBLOB="2c736d61636b66736861743d262c61756469742c7375626a5f726f6c653d45d6748125fc0c351a8aa75fd9010019adf545f0adecafcb0c65dc2e7d2435820cf2c7a939fcf607c016184e87fe70746cad2c497c651c808e96bbd65a004fa4d8b2171a0cb086a24360f8ad8c62d31bc5d3222a9174e8a03ae139dcded868b163ce046aa45d585efa3be1a976707581d37de064a9d39477321f4baa48cab1095b25754c91a1fe17981f64c8b607fcfdb5b90a0685985d68bdba64bc5811e8669d0dc6927e8c18f8e5704bf20f25b7a286546d72296263503a7e6a731a58c741fecb296f9c793c8874336641d1b029ae710336f6b16c3b62c31b87dcf2cb52378858bf9e92ca442ca765940511de196c76c965db0075500c21792c6f626a5f757365723d7703616e30472d776c616e312c646f6e745f61707072616973652c736d61636b6673666c6f6f723d73656375726974792c7065726d69745f646972656374696f2c686173682c00"])
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:19:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x8000)

18:19:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:55 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:19:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000900", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
sendfile(r3, r4, 0x0, 0x320c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000140))

18:19:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x8000)

18:19:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000900", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
sendfile(r3, r4, 0x0, 0x320c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000140))

18:19:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02000900", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
sendfile(r3, r4, 0x0, 0x320c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000140))

18:19:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x8000)

18:19:57 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x5)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x0, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x5)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x0, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x0)

18:19:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:58 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x5)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000080)={0x0, 0x1})
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:19:58 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2)
r3 = dup(r1)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x0, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
socket$l2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000000010000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8018000a8014000700fe80000000008a96b377c0931878db170e000000000000000000fb6a4124a935e874db4933629c54f54f2991289e6e09042fa8e022f45750febdaa4d2afe9b3841bd428f6c3d9c768184ee7277b735432ceaec4e7c2edc2428aaa5f81bb22a44aa3efe3db095d43bfdbb41de9aff4075876f1518b9658f4212d33f4c53a19204762452"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x1000, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xd447}}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x4, 0xfdc}}, 0xe8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40045)
accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0xffffffffffffffa6)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
r9 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ftruncate(r9, 0x7fff)
sendfile(r3, r9, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe)

18:19:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:19:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r7, 0x0, 0x8000)

18:19:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r7, 0x0, 0x8000)

[  987.119384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15510 comm=syz-executor.3
18:19:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x0)

18:19:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:59 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x2)
write(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f00000000c0)='./bus/file0\x00', 0x151042, 0x80)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:19:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r7, 0x0, 0x8000)

18:19:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:19:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:19:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x2)
write(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f00000000c0)='./bus/file0\x00', 0x151042, 0x80)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:20:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = dup(r3)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r7, 0x0, 0x8000)

18:20:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f0000000080)=""/92, 0x87}], 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:20:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x0)

18:20:00 executing program 4 (fault-call:4 fault-nth:0):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[  988.553755] FAULT_INJECTION: forcing a failure.
[  988.553755] name failslab, interval 1, probability 0, space 0, times 0
18:20:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x0, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f0000000080)=""/92, 0x87}], 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

[  988.647967] CPU: 1 PID: 15604 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  988.655908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  988.665478] Call Trace:
[  988.668076]  dump_stack+0x13e/0x194
[  988.671717]  should_fail.cold+0x10a/0x14b
[  988.675884]  should_failslab+0xd6/0x130
[  988.679875]  kmem_cache_alloc_node+0x288/0x7a0
[  988.684470]  ? __lock_acquire+0x5f7/0x4620
[  988.688724]  __alloc_skb+0x9a/0x4c0
[  988.692361]  ? skb_trim+0x160/0x160
[  988.695996]  ? perf_trace_lock+0x109/0x4b0
[  988.700246]  alloc_skb_with_frags+0x85/0x4f0
[  988.704668]  sock_alloc_send_pskb+0x586/0x6d0
[  988.709186]  ? sock_wmalloc+0xf0/0xf0
[  988.712991]  ? _copy_from_iter_full+0x1b9/0x6a0
[  988.717665]  ? __lock_acquire+0x5f7/0x4620
[  988.721910]  tun_get_user+0x5d4/0x3880
[  988.725816]  ? tun_net_xmit+0xf10/0xf10
[  988.729801]  ? find_held_lock+0x2d/0x110
[  988.733870]  ? __tun_get+0x11c/0x220
[  988.737600]  ? lock_downgrade+0x6e0/0x6e0
[  988.741761]  tun_chr_write_iter+0xcf/0x179
[  988.746003]  __vfs_write+0x44e/0x630
[  988.749816]  ? kernel_read+0x110/0x110
[  988.753721]  ? avc_policy_seqno+0x5/0x10
[  988.757809]  ? selinux_file_permission+0x7a/0x440
[  988.762670]  ? rw_verify_area+0xe1/0x2a0
[  988.766739]  vfs_write+0x192/0x4e0
[  988.770287]  SyS_write+0xf2/0x210
[  988.773745]  ? SyS_read+0x210/0x210
[  988.777383]  ? do_syscall_64+0x7a/0x640
[  988.781361]  ? SyS_read+0x210/0x210
[  988.784995]  do_syscall_64+0x1d5/0x640
[  988.788900]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  988.794181] RIP: 0033:0x45c4a9
[  988.797382] RSP: 002b:00007f8c1ec48c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  988.805099] RAX: ffffffffffffffda RBX: 00007f8c1ec496d4 RCX: 000000000045c4a9
[  988.812375] RDX: 000000000000002a RSI: 0000000020000280 RDI: 0000000000000003
[  988.819651] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  988.826938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  988.834217] R13: 0000000000000d0b R14: 00000000004cefab R15: 0000000000000000
18:20:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:01 executing program 4 (fault-call:4 fault-nth:1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:01 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140))
socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/194, 0xc2}, {&(0x7f0000000080)=""/92, 0x87}], 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:20:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x0, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[  989.086816] FAULT_INJECTION: forcing a failure.
[  989.086816] name failslab, interval 1, probability 0, space 0, times 0
[  989.121249] CPU: 1 PID: 15638 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[  989.129189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  989.138649] Call Trace:
[  989.141262]  dump_stack+0x13e/0x194
[  989.144919]  should_fail.cold+0x10a/0x14b
[  989.149085]  should_failslab+0xd6/0x130
[  989.153066]  kmem_cache_alloc_node_trace+0x292/0x7b0
[  989.158181]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[  989.163645]  ? __alloc_skb+0x9a/0x4c0
[  989.167482]  __kmalloc_node_track_caller+0x38/0x70
[  989.172428]  __kmalloc_reserve.isra.0+0x35/0xd0
[  989.177121]  __alloc_skb+0xca/0x4c0
[  989.180764]  ? skb_trim+0x160/0x160
[  989.184402]  ? perf_trace_lock+0x109/0x4b0
[  989.188651]  alloc_skb_with_frags+0x85/0x4f0
[  989.193103]  sock_alloc_send_pskb+0x586/0x6d0
[  989.197631]  ? sock_wmalloc+0xf0/0xf0
[  989.201449]  ? _copy_from_iter_full+0x1b9/0x6a0
[  989.206142]  ? check_preemption_disabled+0x35/0x240
[  989.211173]  tun_get_user+0x5d4/0x3880
[  989.215083]  ? tun_net_xmit+0xf10/0xf10
[  989.219077]  ? find_held_lock+0x2d/0x110
[  989.223152]  ? __tun_get+0x11c/0x220
[  989.227661]  ? lock_downgrade+0x6e0/0x6e0
[  989.231821]  tun_chr_write_iter+0xcf/0x179
[  989.236059]  __vfs_write+0x44e/0x630
[  989.239793]  ? kernel_read+0x110/0x110
[  989.243695]  ? avc_policy_seqno+0x5/0x10
[  989.247768]  ? selinux_file_permission+0x7a/0x440
[  989.252634]  ? rw_verify_area+0xe1/0x2a0
[  989.256708]  vfs_write+0x192/0x4e0
[  989.260302]  SyS_write+0xf2/0x210
[  989.263766]  ? SyS_read+0x210/0x210
[  989.267425]  ? SyS_clock_settime+0x1a0/0x1a0
[  989.271843]  ? do_syscall_64+0x4c/0x640
[  989.275822]  ? SyS_read+0x210/0x210
[  989.279458]  do_syscall_64+0x1d5/0x640
18:20:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:01 executing program 3 (fault-call:11 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

[  989.283367]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  989.288561] RIP: 0033:0x45c4a9
[  989.291752] RSP: 002b:00007f8c1ec48c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  989.299475] RAX: ffffffffffffffda RBX: 00007f8c1ec496d4 RCX: 000000000045c4a9
[  989.306749] RDX: 000000000000002a RSI: 0000000020000280 RDI: 0000000000000003
[  989.314024] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[  989.321297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  989.328573] R13: 0000000000000d0b R14: 00000000004cefab R15: 0000000000000001
18:20:01 executing program 1 (fault-call:16 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:01 executing program 4 (fault-call:4 fault-nth:2):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

[  989.529108] FAULT_INJECTION: forcing a failure.
[  989.529108] name failslab, interval 1, probability 0, space 0, times 0
[  989.545466] CPU: 0 PID: 15660 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0
[  989.553402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  989.562777] Call Trace:
[  989.565386]  dump_stack+0x13e/0x194
[  989.569069]  should_fail.cold+0x10a/0x14b
[  989.573245]  should_failslab+0xd6/0x130
18:20:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[  989.577264]  __kmalloc+0x2e9/0x7c0
[  989.580813]  ? SOFTIRQ_verbose+0x10/0x10
[  989.584879]  ? rw_copy_check_uvector+0x1d4/0x290
[  989.589637]  rw_copy_check_uvector+0x1d4/0x290
[  989.594217]  ? check_preemption_disabled+0x35/0x240
[  989.599242]  import_iovec+0x94/0x360
[  989.602964]  ? dup_iter+0x240/0x240
[  989.606596]  ? perf_trace_lock+0x109/0x4b0
[  989.610848]  vfs_readv+0xb3/0x130
[  989.614310]  ? compat_rw_copy_check_uvector+0x320/0x320
[  989.619700]  ? find_held_lock+0x2d/0x110
[  989.623780]  ? __fget+0x201/0x360
[  989.627251]  ? lock_downgrade+0x6e0/0x6e0
[  989.631410]  ? __fget+0x228/0x360
[  989.634879]  do_preadv+0x161/0x200
[  989.638525]  ? do_readv+0x2c0/0x2c0
[  989.642166]  ? SyS_clock_settime+0x1a0/0x1a0
[  989.646696]  ? do_syscall_64+0x4c/0x640
[  989.650679]  ? SyS_writev+0x30/0x30
[  989.654346]  do_syscall_64+0x1d5/0x640
[  989.658249]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  989.663443] RIP: 0033:0x45c4a9
[  989.666635] RSP: 002b:00007f3bc0d51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
18:20:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x0, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

[  989.674350] RAX: ffffffffffffffda RBX: 00007f3bc0d526d4 RCX: 000000000045c4a9
[  989.681623] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000006
[  989.688897] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  989.696168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  989.703454] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000000
[  989.838251] FAULT_INJECTION: forcing a failure.
[  989.838251] name failslab, interval 1, probability 0, space 0, times 0
[  989.849963] CPU: 1 PID: 15673 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[  989.857876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  989.867259] Call Trace:
[  989.869866]  dump_stack+0x13e/0x194
[  989.873521]  should_fail.cold+0x10a/0x14b
[  989.877692]  should_failslab+0xd6/0x130
[  989.881679]  __kmalloc+0x2e9/0x7c0
[  989.885232]  ? SOFTIRQ_verbose+0x10/0x10
[  989.889302]  ? rw_copy_check_uvector+0x1d4/0x290
[  989.894072]  rw_copy_check_uvector+0x1d4/0x290
[  989.898667]  ? check_preemption_disabled+0x35/0x240
[  989.903697]  import_iovec+0x94/0x360
[  989.907425]  ? dup_iter+0x240/0x240
[  989.911065]  ? perf_trace_lock+0x109/0x4b0
[  989.915317]  vfs_readv+0xb3/0x130
[  989.918780]  ? compat_rw_copy_check_uvector+0x320/0x320
[  989.924152]  ? find_held_lock+0x2d/0x110
[  989.928221]  ? __fget+0x201/0x360
[  989.931694]  ? lock_downgrade+0x6e0/0x6e0
[  989.935860]  ? __fget+0x228/0x360
[  989.939334]  do_preadv+0x161/0x200
[  989.942885]  ? do_readv+0x2c0/0x2c0
[  989.946520]  ? SyS_clock_settime+0x1a0/0x1a0
[  989.950934]  ? do_syscall_64+0x4c/0x640
[  989.954917]  ? SyS_writev+0x30/0x30
[  989.958557]  do_syscall_64+0x1d5/0x640
[  989.962460]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  989.967695] RIP: 0033:0x45c4a9
[  989.970920] RSP: 002b:00007fa18e614c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  989.978639] RAX: ffffffffffffffda RBX: 00007fa18e6156d4 RCX: 000000000045c4a9
18:20:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7f}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:02 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[  989.985919] RDX: 00000000000001a2 RSI: 00000000200017c0 RDI: 0000000000000006
[  989.993223] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[  990.000530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  990.007834] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000000
18:20:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/86, 0x56}], 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:02 executing program 3 (fault-call:11 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:02 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'vlan1\x00', {0x7, 0x2, @remote}})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00008864000014779cb6ea95fe4b7154ea0000004500001c0000000000019078ac141400e057f642535971e38bfd2b8882d612a32e3e275ebee541afd52c12024b75ff57d93ef6ff7a76c1ab13c19734c745e97a0ae624cb4334495be0f64d2e7d7e001d60d41892fe86330848d3801d52f39e5e69f44ed97520b64837dc49755510289cc09fc5d2d870f6fce69fbf3f50a5907c6978436d"], 0x2a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

18:20:02 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0xa, 0x10)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x41, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
dup3(r6, r8, 0x80000)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x408000)

[  990.719193] FAULT_INJECTION: forcing a failure.
[  990.719193] name failslab, interval 1, probability 0, space 0, times 0
[  990.746241] CPU: 0 PID: 15711 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0
[  990.754169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  990.763637] Call Trace:
[  990.766269]  dump_stack+0x13e/0x194
[  990.770034]  should_fail.cold+0x10a/0x14b
[  990.774204]  should_failslab+0xd6/0x130
[  990.778193]  kmem_cache_alloc_node_trace+0x292/0x7b0
[  990.783322]  ? retint_kernel+0x2d/0x2d
[  990.787217]  __kmalloc_node+0x38/0x70
[  990.791041]  kvmalloc_node+0x46/0xd0
[  990.794760]  seq_read+0x886/0x1160
[  990.798301]  ? avc_policy_seqno+0x5/0x10
[  990.802361]  ? selinux_file_permission+0x7a/0x440
[  990.807323]  ? seq_lseek+0x3d0/0x3d0
[  990.811028]  ? security_file_permission+0x82/0x1e0
[  990.815954]  ? rw_verify_area+0xe1/0x2a0
[  990.820015]  do_iter_read+0x3e3/0x5a0
[  990.823843]  vfs_readv+0xd3/0x130
[  990.827313]  ? compat_rw_copy_check_uvector+0x320/0x320
[  990.837078]  ? find_held_lock+0x2d/0x110
[  990.841185]  ? __fget+0x201/0x360
[  990.844669]  ? lock_downgrade+0x6e0/0x6e0
[  990.848828]  ? __fget+0x228/0x360
[  990.852286]  do_preadv+0x161/0x200
[  990.855816]  ? do_readv+0x2c0/0x2c0
[  990.859435]  ? SyS_clock_settime+0x1a0/0x1a0
[  990.863862]  ? do_syscall_64+0x4c/0x640
[  990.867886]  ? SyS_writev+0x30/0x30
[  990.871526]  do_syscall_64+0x1d5/0x640
[  990.875466]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  990.880695] RIP: 0033:0x45c4a9
[  990.883997] RSP: 002b:00007f3bc0d51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  990.891825] RAX: ffffffffffffffda RBX: 00007f3bc0d526d4 RCX: 000000000045c4a9
[  990.899281] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000006
[  990.906573] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[  990.913851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  990.921149] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000001
18:20:03 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000000)=""/107)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9, 0x0, 0x2000000000, 0x0, 0x0, 0x6}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x200000)

18:20:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:03 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:03 executing program 3 (fault-call:11 fault-nth:2):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:04 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfec0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'tunl0\x00', {0x7, 0x0, @broadcast}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4102, 0x1006}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x10)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000886400000012e03f4378a5bb99000001000000004500001c0000000000019078ac141400e0000001"], 0x2a)

18:20:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
dup(0xffffffffffffffff)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vga_arbiter\x00', 0x220a01, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:05 executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002300)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000002400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x200000, 0x0)
ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f00000011c0))
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfec0)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000080)=""/105, &(0x7f0000000100)=0x69)
pipe(&(0x7f00000012c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001240)=@get={0x1, &(0x7f0000001300)=""/4096, 0xe7})

18:20:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val={0x0, 0x0, 0x0, 0x1ff}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x20, 0x0, "bfc95d775d57ef86c4d73849ba7f3bbfb4da9bd071d191416956f8e7828116d8ee96e7a2111e7a28e6cf7b126318c6ee24323e1a844c1daa0a0b259a16604dc6f5b7a073e3572b7083b4b0c4afb575f2"}, 0xd8)

18:20:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0xb7, 0x0, 0x0, 0x1b}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x401)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000001200)={<r5=>0x0, <r6=>0x0})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000001300)={0x5, 0x9, 0x4, 0x40000, 0x10000, {r5, r6/1000+10000}, {0x5, 0x0, 0xe0, 0xf7, 0x6, 0x40, "b6141d15"}, 0x1, 0x2, @planes=&(0x7f0000001240)={0x1000, 0x2, @fd=<r8=>r0, 0x4}, 0x0, 0x0, <r9=>r7})
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, <r11=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r11, 0x0, 0x0)
ioprio_set$uid(0x3, r11, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001380)={{{@in=@remote, @in6=@local, 0x4e24, 0x5, 0x4e20, 0x100, 0x2, 0x20, 0x20, 0x2b, 0x0, r11}, {0x9, 0x0, 0x9, 0x8000, 0x1, 0x4, 0x10000, 0xfffffffffffffffb}, {0x0, 0x53b4afcb, 0x4, 0x2}, 0x80000000, 0x6e6bb3, 0x0, 0x0, 0x2, 0x1}, {{@in=@remote, 0x4d2, 0x50}, 0xa, @in=@broadcast, 0x3500, 0x3, 0x2, 0x8, 0xded, 0x4, 0xffffff81}}, 0xe8)
r12 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r12, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x20, r8, &(0x7f0000000080)="d8fe5d373f379abf1c74b793dffc30f732d00753ce9d59fd156c4509105994f8e9a1e6d93d047a19b0019a06f051fa74c152bae57ea7ea8ed0a7aadf19bfaa234192cdc846ddc6d20efcaece79b69c96c30d7a47abb7eebce0c8f5c09cbdf6d568e0263281806d183612a911fb3aaf64a33654f7208371f062d641391c229a07d4b0353087bd90b4a0b3ecd39878354543bd7b08eb7aa73d705caa57ff56f8b8343e3250a116a7", 0xa7, 0x100, 0x0, 0x2}, &(0x7f00000011c0))
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r13 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)

18:20:06 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1000, 0x153000)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e)
ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00008864000000000000000000ac141400e000000a12009078e86b66bbf003b9e36b00"/51], 0x2a)

18:20:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x40, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340), 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:07 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000180)="d5af7b262a57a692724fb5f04d29c1b2a180d85ab1343d1f60be0482d48d117a77ea0938e2716246ab5a8c2e6c9222c401cda8caf33b37f31267748cff5531ba188433960bd88d1b37f49a5f14c3b02ecfd780bcb6d7fae5d5adb63623f58433864b5847e100000000e857007e140ba674494ab8ba17c0f9b9fd69baad5b20701e5b5f9f6d79f5088a0265d6d76b1b25a826f73bd27de9db0c413fff00abb7fe5134f3825007118f7babfad70d000000000000", 0xfffffd41)
ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0xe0f]})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000380))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:08 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write(r0, &(0x7f0000001240)="f7be11bad9162ba13caf7c88a8db0f6a35f4b49dd0e56b11516dc3ae58e261d628f796b59b5652be3709b3285f7c9d5b5be4b6b0b80d322c123175cd90e7f5c3c158d086cd178270295864d495", 0x4d)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x2000000, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa3ffff000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d9537000000000065040400010000000404000001007d60b703000000000000620a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002e0, 0x69, 0x0, &(0x7f00000004c0)="b95b03b700030000009e40f086dd1fff060000000000000177fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/170, 0xaa}, {&(0x7f0000001300)=""/80, 0x50}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000001480)=""/74, 0x4a}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000001500)=""/98, 0x62}, {&(0x7f0000001580)=""/16, 0x10}], 0x7, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)

18:20:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340), 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000380))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000))
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, 0x0, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000380))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340), 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x600c2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000080))

18:20:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:09 executing program 4:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0xc}, @void, @eth={@local, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x3a, 0x1, 0x0, 0x0, "f0bcc1aa50bf67521154850470e755c0c86a7a275a29ad331c045fe173ad6207c243f0474f748780f28aaad77c4c769ee146b93e4beb90b003f9fcd3403b5b43"}}}}}, 0x5e)
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000001480)="2e4a548114b5e4a256404ca0742e8230c4352407ff46727896ea0c8fe245c5844800e9db5bab15d598726230b29cfb4319b4804553ca615b51edd4506ec0ee3095f4e290e53483296ac9ca1ae84d85a5e99215842136c2655c76723b5b3d8e5c1527fb1165bf5c47c95a128d491b73ae1fe94f79f782e16608ca3bb2ca1da16905c62957c450b745bdf4bcd94ac982b742670d44cf5de90d", 0x98)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1002.565260] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1002.606151] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1002.615683] CPU: 1 PID: 7521 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[ 1002.623593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1002.633039] Call Trace:
[ 1002.635742]  dump_stack+0x13e/0x194
[ 1002.639599]  dump_header+0x178/0x6d4
[ 1002.643323]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1002.648733]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1002.653967]  ? ___ratelimit+0x50/0x519
[ 1002.658172]  oom_kill_process.cold+0x10/0xae3
[ 1002.662680]  ? lock_downgrade+0x6e0/0x6e0
[ 1002.667501]  out_of_memory+0x2d5/0x1110
[ 1002.671947]  ? oom_killer_disable+0x1c0/0x1c0
[ 1002.676642]  ? mutex_trylock+0x152/0x1a0
[ 1002.680993]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1002.685864]  ? warn_alloc+0xf0/0xf0
[ 1002.689513]  ? find_held_lock+0x2d/0x110
[ 1002.693581]  ? fs_reclaim_acquire+0x10/0x10
[ 1002.697927]  __alloc_pages_nodemask+0x5d3/0x700
[ 1002.702606]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1002.707631]  ? find_held_lock+0x2d/0x110
[ 1002.711707]  ? cache_grow_begin+0x32d/0x410
[ 1002.716037]  cache_grow_begin+0x7b/0x410
[ 1002.720134]  ? __cpuset_node_allowed+0xfa/0x450
[ 1002.724815]  fallback_alloc+0x205/0x2b0
[ 1002.728797]  kmem_cache_alloc+0x1ea/0x770
[ 1002.732956]  ? check_preemption_disabled+0x35/0x240
[ 1002.737984]  getname_flags+0xc8/0x560
[ 1002.741801]  user_path_at_empty+0x2a/0x50
[ 1002.745958]  vfs_statx+0xd1/0x160
[ 1002.749416]  ? vfs_statx_fd+0x90/0x90
[ 1002.753257]  SYSC_newlstat+0x83/0xe0
[ 1002.756978]  ? SYSC_newstat+0xe0/0xe0
[ 1002.760790]  ? mntput_no_expire+0xee/0x800
[ 1002.765047]  ? SyS_umount+0x16b/0x340
[ 1002.768864]  ? __detach_mounts+0x2e0/0x2e0
[ 1002.773108]  ? __do_page_fault+0x35b/0xb40
[ 1002.777374]  ? do_syscall_64+0x4c/0x640
[ 1002.781356]  ? SyS_newstat+0x20/0x20
[ 1002.785077]  do_syscall_64+0x1d5/0x640
[ 1002.789000]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1002.794196] RIP: 0033:0x45b865
[ 1002.797389] RSP: 002b:00007ffe0d3e6d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[ 1002.805109] RAX: ffffffffffffffda RBX: 00000000000f4ba5 RCX: 000000000045b865
[ 1002.812385] RDX: 00007ffe0d3e6d40 RSI: 00007ffe0d3e6d40 RDI: 00007ffe0d3e6dd0
[ 1002.819661] RBP: 000000000000156f R08: 0000000000000000 R09: 0000000000000011
[ 1002.827027] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe0d3e7e60
[ 1002.834305] R13: 0000000001d64940 R14: 0000000000000000 R15: 00007ffe0d3e7e60
[ 1002.842903] Mem-Info:
[ 1002.849971] active_anon:1308349 inactive_anon:9453 isolated_anon:0
[ 1002.849971]  active_file:182 inactive_file:514 isolated_file:32
[ 1002.849971]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1002.849971]  slab_reclaimable:17220 slab_unreclaimable:123135
[ 1002.849971]  mapped:52653 shmem:258 pagetables:30047 bounce:0
[ 1002.849971]  free:23522 free_pcp:117 free_cma:0
[ 1002.911689] Node 0 active_anon:1821400kB inactive_anon:37800kB active_file:48kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208956kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1002.941553] Node 1 active_anon:3411996kB inactive_anon:12kB active_file:124kB inactive_file:500kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:256kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1002.985607] Node 0 DMA free:10336kB min:220kB low:272kB high:324kB active_anon:4260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1003.028316] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1003.039532] Node 0 DMA32 free:28392kB min:36272kB low:45340kB high:54408kB active_anon:1817140kB inactive_anon:37800kB active_file:48kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:18880kB pagetables:50592kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
[ 1003.120701] lowmem_reserve[]: 0 0 0 0 0
[ 1003.124967] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1003.154185] lowmem_reserve[]: 0 0 0 0 0
[ 1003.159139] Node 1 Normal free:55996kB min:53612kB low:67012kB high:80412kB active_anon:3412124kB inactive_anon:12kB active_file:428kB inactive_file:1028kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21664kB pagetables:69624kB bounce:0kB free_pcp:220kB local_pcp:156kB free_cma:0kB
[ 1003.190539] lowmem_reserve[]: 0 0 0 0 0
[ 1003.194574] Node 0 DMA: 6*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 2*128kB (UE) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10336kB
[ 1003.214511] Node 0 DMA32: 423*4kB (UME) 212*8kB (UME) 701*16kB (UMEH) 434*32kB (UEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28492kB
[ 1003.235429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1003.248747] Node 1 Normal: 34*4kB (MEH) 75*8kB (MEH) 49*16kB (M) 43*32kB (UMEH) 80*64kB (UMEH) 14*128kB (UME) 3*256kB (UE) 3*512kB (UME) 1*1024kB (E) 1*2048kB (M) 10*4096kB (M) = 56144kB
[ 1003.272543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1003.287489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1003.299928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1003.315794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1003.325813] 541 total pagecache pages
[ 1003.329628] 0 pages in swap cache
[ 1003.341076] Swap cache stats: add 0, delete 0, find 0/0
[ 1003.346491] Free swap  = 0kB
[ 1003.349510] Total swap = 0kB
[ 1003.359635] 1965979 pages RAM
[ 1003.362861] 0 pages HighMem/MovableOnly
[ 1003.367037] 339049 pages reserved
[ 1003.370626] 0 pages cma reserved
[ 1003.374001] Out of memory: Kill process 541 (syz-executor.5) score 1007 or sacrifice child
[ 1003.384047] Killed process 541 (syz-executor.5) total-vm:75228kB, anon-rss:18644kB, file-rss:34688kB, shmem-rss:0kB
[ 1003.439169] oom_reaper: reaped process 541 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:20:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100), 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
arch_prctl$ARCH_GET_CPUID(0x1011)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000080))
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:22 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x1000, 0x80000001, 0x6, 0x504})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:20:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:48 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prlimit64(r0, 0x8, &(0x7f0000000280)={0x9, 0x8e}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfec0)
vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000500)}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xfec0)
write(r8, &(0x7f0000000340), 0x0)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r9, r10, 0x0)
r11 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0xfec0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4)
sendto$inet(r10, &(0x7f00000013c0)="3766363005964e5896199451aca9a3f1486762f7b279d74a157d13f930f2346766ac06f3c0db405330fbff128a5571d34eb70940ab44fc38620a21d578192498a48ee009d0f6b1d1c52864c22c1e4f22c8c10c2c1b11cbd988e686bea3aada9035971c1d6aeff4e0dbd9c4c78448fd6606a730a26d3afc6791c9d81baa822330c8af0548be3ca1c92619f332f0eb06c111", 0x91, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r12 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r12, &(0x7f00000017c0), 0x0, 0x4)
r13 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r13, 0x0, 0x8000)

18:20:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100), 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100), 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:48 executing program 3:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001200)={0x0, 0x8, &(0x7f00000000c0)=[0x4c59, 0x6, 0xeaff, 0x3ada, 0xda, 0x101, 0x1f, 0x2], &(0x7f0000000100)=[0x97b, 0xe5f7, 0x1, 0x5, 0x81, 0x7], &(0x7f0000000180)=[0x5, 0x0, 0x2, 0x9a8, 0xcacb, 0x139, 0x1], &(0x7f00000011c0)=[0x1ff, 0x9, 0x400, 0xd9, 0x1, 0x4]})
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r1 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0xfffffdf6)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80003000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4008040)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r6, &(0x7f00000017c0), 0x375, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001380)='/dev/hwrng\x00', 0x2, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580)='/dev/snapshot\x00', 0xa2c00, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r10, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r11 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0xfec0)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, <r13=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r13, 0x0, 0x0)
ioprio_set$uid(0x3, r13, 0x0)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
setresgid(0x0, r15, 0x0)
setresgid(r15, r14, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
fcntl$setpipe(r16, 0x407, 0x0)
write(r16, &(0x7f0000000340), 0x41395527)
getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f00000015c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000016c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, <r18=>0x0}, &(0x7f0000001740)=0xc)
pipe(&(0x7f0000000140)={<r19=>0xffffffffffffffff})
vmsplice(r19, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r20 = getpid()
sched_setattr(r20, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r19, 0xc0286405, &(0x7f0000001780)={0x401, 0xffff, {<r21=>r20}, {}, 0x2, 0x7f})
r22 = getuid()
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0})
setresgid(0x0, r24, 0x0)
setresgid(r24, r23, 0x0)
r25 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000240)={0x0, <r26=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r26, 0x0, 0x0)
ioprio_set$uid(0x3, r26, 0x0)
lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
sendmsg$unix(r7, &(0x7f0000001980)={&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)="2d2be28133343b8241564a", 0xb}, {&(0x7f0000001480)="f5c71f53b4de43b4f3def579242012d7cf0d79364e4dbb00b1c8fecc15d03d657b27316951f580d4d50a9bef16511f3eb257d92ce3b42282fd9f97131e01375b50827a53c211dc8fa849096796de78fa7965e176cb4509c45c1a508438971bc3312ab062629afe495c470f0472de979c268eb850fea09c4ca4fd2f94047d146ce7add62b60b5cf0294869cc71ac3ed75968139335b903f8c15a8b6f69978d0036b", 0xa1}], 0x2, &(0x7f0000001880)=[@rights={{0x34, 0x1, 0x1, [r5, r8, 0xffffffffffffffff, r9, r10, r0, r11, r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r1, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r24}}}, @cred={{0x1c, 0x1, 0x2, {r1, r26, r27}}}], 0xd0, 0x8000}, 0x4000000)

18:20:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8864}, @val, @ipv4=@udp={{0x6, 0x4, 0x3, 0x2, 0x40, 0x68, 0x0, 0x3f, 0x11, 0x0, @rand_addr=0x7, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}, {0x4e20, 0x4e23, 0x28, 0x0, @opaque="1f211e8f4a5f3c138065c2162265401d470028c5564b02746f462c2a4252d27d"}}}, 0x4e)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x0, 0x3f})

18:20:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x15)
open_by_handle_at(r9, 0x0, 0x8000)

18:20:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1036.752987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pig=16116 comm=syz-executor.3
18:20:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:20:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:20:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:20:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = epoll_create(0x5)
r4 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000bf8ff4)={0x4})
epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)

18:20:49 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x201, 0x5)
write$input_event(r2, &(0x7f0000000040)={{}, 0x12, 0x6, 0x2}, 0x18)
write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x8864}, @val={0x0, 0x0, 0x0, 0x4}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @local, @link_local, @loopback}}, 0x42)

18:20:49 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x2, 0x40000, 0x200, 0x7ff, 0xff, 0x7}}, 0x50)
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:20:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:21:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:21:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:21:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:21:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x28000)

18:22:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:22:07 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'nr0\x00'})
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)

18:22:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:22:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:22:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300), 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:22:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:22:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:22:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080))

[ 1152.769538] kworker/u4:7 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[ 1152.897112] kworker/u4:7 cpuset=/ mems_allowed=0-1
[ 1152.953102] CPU: 1 PID: 1372 Comm: kworker/u4:7 Not tainted 4.14.172-syzkaller #0
[ 1152.960758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1152.970123] Workqueue: events_unbound call_usermodehelper_exec_work
[ 1152.976526] Call Trace:
[ 1152.979118]  dump_stack+0x13e/0x194
[ 1152.982752]  dump_header+0x178/0x6d4
[ 1152.986468]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1152.991491]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1152.996596]  ? ___ratelimit+0x50/0x519
[ 1153.000489]  oom_kill_process.cold+0x10/0xae3
[ 1153.004989]  ? lock_acquire+0x170/0x3f0
[ 1153.008966]  ? lock_downgrade+0x6e0/0x6e0
[ 1153.013130]  out_of_memory+0x2d5/0x1110
[ 1153.017124]  ? oom_killer_disable+0x1c0/0x1c0
[ 1153.021634]  ? mutex_trylock+0x152/0x1a0
[ 1153.025701]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1153.030583]  ? warn_alloc+0xf0/0xf0
[ 1153.034230]  __alloc_pages_nodemask+0x5d3/0x700
[ 1153.038905]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1153.043922]  ? copy_process.part.0+0x17d5/0x6a70
[ 1153.048681]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1153.053705]  ? ___perf_sw_event+0x2cb/0x470
[ 1153.058034]  copy_process.part.0+0x26a/0x6a70
[ 1153.062538]  ? __lock_acquire+0x5f7/0x4620
[ 1153.066779]  ? ___perf_sw_event+0x2f7/0x470
[ 1153.071109]  ? check_preemption_disabled+0x35/0x240
[ 1153.076142]  ? umh_complete+0x80/0x80
[ 1153.079945]  ? __cleanup_sighand+0x40/0x40
[ 1153.084188]  ? SOFTIRQ_verbose+0x10/0x10
[ 1153.088250]  ? umh_complete+0x80/0x80
[ 1153.092067]  _do_fork+0x180/0xc80
[ 1153.095540]  ? fork_idle+0x270/0x270
[ 1153.099258]  ? mark_held_locks+0xa6/0xf0
[ 1153.103326]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1153.107824]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1153.112842]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1153.117337]  ? kernel_sigaction+0x13b/0x200
[ 1153.121656]  ? recalc_sigpending+0x90/0x90
[ 1153.125891]  ? umh_complete+0x80/0x80
[ 1153.129695]  kernel_thread+0x2f/0x40
[ 1153.133414]  call_usermodehelper_exec_work+0x97/0x210
[ 1153.138602]  ? call_usermodehelper_exec_async+0x4c0/0x4c0
[ 1153.144140]  ? rcu_lockdep_current_cpu_online+0xed/0x140
[ 1153.149600]  process_one_work+0x813/0x1540
[ 1153.153844]  ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[ 1153.158508]  ? worker_thread+0x15d/0x1070
[ 1153.162663]  worker_thread+0x5d1/0x1070
[ 1153.166648]  ? process_one_work+0x1540/0x1540
[ 1153.171153]  kthread+0x30d/0x420
[ 1153.174537]  ? kthread_create_on_node+0xd0/0xd0
[ 1153.179276]  ret_from_fork+0x24/0x30
[ 1154.633721] Mem-Info:
[ 1154.636207] active_anon:1321813 inactive_anon:4796 isolated_anon:0
[ 1154.636207]  active_file:24 inactive_file:10 isolated_file:0
[ 1154.636207]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1154.636207]  slab_reclaimable:17169 slab_unreclaimable:114832
[ 1154.636207]  mapped:52229 shmem:258 pagetables:30218 bounce:0
[ 1154.636207]  free:23712 free_pcp:30 free_cma:0
[ 1154.922194] Node 0 active_anon:1851740kB inactive_anon:19164kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208916kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1155.035955] Node 1 active_anon:3435512kB inactive_anon:20kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1155.184378] Node 0 DMA free:10432kB min:220kB low:272kB high:324kB active_anon:4360kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1155.386414] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1155.430688] Node 0 DMA32 free:30908kB min:36272kB low:45340kB high:54408kB active_anon:1847380kB inactive_anon:19164kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:18944kB pagetables:50596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1155.637537] lowmem_reserve[]: 0 0 0 0 0
[ 1155.665619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1155.843524] lowmem_reserve[]: 0 0 0 0 0
[ 1155.847598] Node 1 Normal free:53580kB min:53612kB low:67012kB high:80412kB active_anon:3435512kB inactive_anon:20kB active_file:136kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21664kB pagetables:70276kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1156.087388] lowmem_reserve[]: 0 0 0 0 0
[ 1156.127829] Node 0 DMA: 1*4kB (E) 13*8kB (UME) 7*16kB (UME) 7*32kB (UME) 4*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10428kB
[ 1156.242663] Node 0 DMA32: 181*4kB (UME) 643*8kB (UME) 511*16kB (UME) 530*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 31004kB
[ 1156.347417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1156.422547] Node 1 Normal: 123*4kB (UME) 98*8kB (UME) 45*16kB (UME) 246*32kB (UM) 101*64kB (UME) 35*128kB (UM) 12*256kB (UM) 4*512kB (U) 3*1024kB (UME) 2*2048kB (UM) 5*4096kB (M) = 53580kB
[ 1156.538328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1156.618151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1156.682990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1156.754595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1156.808027] 306 total pagecache pages
[ 1156.839357] 0 pages in swap cache
[ 1156.863195] Swap cache stats: add 0, delete 0, find 0/0
[ 1156.868612] Free swap  = 0kB
[ 1156.915589] Total swap = 0kB
[ 1156.918817] 1965979 pages RAM
[ 1156.938974] 0 pages HighMem/MovableOnly
[ 1156.943084] 339049 pages reserved
[ 1156.946538] 0 pages cma reserved
[ 1156.949909] Out of memory: Kill process 31637 (syz-executor.3) score 1007 or sacrifice child
[ 1157.127513] Killed process 31637 (syz-executor.3) total-vm:74832kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB
[ 1157.303272] oom_reaper: reaped process 31637 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:22:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:23:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:23:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300), 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:23:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
connect(r1, &(0x7f00000011c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x990000, 0xfffffffa, 0x2, <r4=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x4, [], @string=&(0x7f0000000080)}})
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000180))

18:23:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:23:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8e}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffff7f}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfec0)
write(r3, &(0x7f0000001300)="b1972e55185c5effba554075c759000000539a4bd81bc5a606dbc3e3c68428e2b9cd740b29e0e601b1cee0cfb81d05b99ed37b361607c76e3c7bed31ae2ab202ccaaec5155eb66f27c6730f9475d8fde85", 0x51)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x20000004, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:23:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:23:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=<r1=>0x0)
syz_open_procfs(r1, &(0x7f0000000340)='personality\x00')
socket$netlink(0x10, 0x3, 0x12)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000400)={0x9c0000, 0x1000, 0xfffffffd, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x9d0901, 0x8, [], @p_u8=&(0x7f0000000040)=0x80}})
r3 = socket$isdn_base(0x22, 0x3, 0x0)
fgetxattr(r3, &(0x7f00000019c0)=@random={'trusted.', 'syzkaller1\x00'}, &(0x7f0000001a00)=""/4096, 0x1000)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r4 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'bond_slave_0\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x1)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x40400, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
ioctl$TCSBRKP(r6, 0x5425, 0xec)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000440)="5d497ad6094661bf6c5f2b14b48a95514d862f15de09f255d9e19e0e748696eac97d8d8ba740ab64cbfd1cbd8aa082b5829608e991052aa5cbc0c4b0285bd2ddacfc11340fd142104c946d5ddaa0afb2519252952999ae44ea2eeaaefce79a77fc92cc568bd64f47fbbbc7ca402dac742fb480044a43bc7573b97581e3d1b66454928c5b5f91021d8fcbe26eb21dec93e4689b94b97138f3534410713b4f75e9f4d56ee5e90a77efe1b5c542863714cc546218c62b04c91070069770accc67c00088d7e636538b214b66", 0xca}], 0x2}, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000240)=0x4, 0x4)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000180)={0x6e9, 0x491121ed14911f45})
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x4, 0x1f48, 0xfff9, 0x6}, 0x8)

18:23:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

[ 1176.855191] audit: type=1400 audit(1583864589.084:12345): avc:  denied  { create } for  pid=16285 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1
[ 1176.908773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17929 sclass=netlink_route_socket pig=16287 comm=syz-executor.4
18:23:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300), 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:23:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:23:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:23:50 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:23:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(r5, &(0x7f0000000180)=[{&(0x7f00000000c0)="6b3ed58e1e0e16", 0x7}], 0x1, 0x4)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:24:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:24:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

[ 1243.376820] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1243.440357] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1243.445776] CPU: 1 PID: 16339 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[ 1243.453655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1243.463000] Call Trace:
[ 1243.465577]  dump_stack+0x13e/0x194
[ 1243.469194]  dump_header+0x178/0x6d4
[ 1243.472903]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1243.477921]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1243.483028]  ? ___ratelimit+0x50/0x519
[ 1243.486925]  oom_kill_process.cold+0x10/0xae3
[ 1243.491435]  ? lock_downgrade+0x6e0/0x6e0
[ 1243.495591]  out_of_memory+0x2d5/0x1110
[ 1243.499576]  ? oom_killer_disable+0x1c0/0x1c0
[ 1243.504073]  ? mutex_trylock+0x152/0x1a0
[ 1243.508139]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1243.513006]  ? warn_alloc+0xf0/0xf0
[ 1243.516638]  ? find_held_lock+0x2d/0x110
[ 1243.520809]  ? fs_reclaim_acquire+0x10/0x10
[ 1243.525152]  __alloc_pages_nodemask+0x5d3/0x700
[ 1243.529841]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1243.534877]  cache_grow_begin+0x7b/0x410
[ 1243.538942]  ? __cpuset_node_allowed+0xfa/0x450
[ 1243.543728]  fallback_alloc+0x205/0x2b0
[ 1243.547712]  kmem_cache_alloc+0x1ea/0x770
[ 1243.551863]  ? retint_kernel+0x2d/0x2d
[ 1243.555747]  getname_flags+0xc8/0x560
[ 1243.559546]  do_sys_open+0x1c4/0x3f0
[ 1243.563255]  ? filp_open+0x60/0x60
[ 1243.566796]  ? do_sys_open+0x3f0/0x3f0
[ 1243.570780]  do_syscall_64+0x1d5/0x640
[ 1243.574679]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1243.579870] RIP: 0033:0x416241
[ 1243.583054] RSP: 002b:00007fd1bf083bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 1243.590759] RAX: ffffffffffffffda RBX: 00007fd1bf0846d4 RCX: 0000000000416241
[ 1243.598021] RDX: 000000000040481f RSI: 0000000000000002 RDI: 00007fd1bf083bd0
[ 1243.605283] RBP: 000000000076c100 R08: 0000000000000000 R09: 000000000000001b
[ 1243.612545] R10: 0000000000000006 R11: 0000000000000293 R12: 00000000ffffffff
[ 1243.619802] R13: 0000000000000c19 R14: 00000000004ce0bc R15: 000000000076c10c
[ 1243.745327] Mem-Info:
[ 1243.747883] active_anon:1330087 inactive_anon:200 isolated_anon:0
[ 1243.747883]  active_file:88 inactive_file:278 isolated_file:32
[ 1243.747883]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1243.747883]  slab_reclaimable:16882 slab_unreclaimable:111057
[ 1243.747883]  mapped:52535 shmem:258 pagetables:30273 bounce:0
[ 1243.747883]  free:23102 free_pcp:493 free_cma:0
[ 1243.826294] Node 0 active_anon:1873896kB inactive_anon:780kB active_file:280kB inactive_file:472kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:209660kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1243.854354] Node 1 active_anon:3446452kB inactive_anon:20kB active_file:72kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1243.882369] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1243.910375] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1243.915457] Node 0 DMA32 free:32268kB min:36272kB low:45340kB high:54408kB active_anon:1869408kB inactive_anon:780kB active_file:796kB inactive_file:1380kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19104kB pagetables:50508kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 1243.953395] lowmem_reserve[]: 0 0 0 0 0
[ 1243.957432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1243.988601] lowmem_reserve[]: 0 0 0 0 0
[ 1243.992687] Node 1 Normal free:51768kB min:53612kB low:67012kB high:80412kB active_anon:3446192kB inactive_anon:20kB active_file:64kB inactive_file:88kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21728kB pagetables:70584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1244.032967] lowmem_reserve[]: 0 0 0 0 0
[ 1244.036991] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1244.052767] Node 0 DMA32: 241*4kB (UME) 846*8kB (UMEH) 537*16kB (UMEH) 478*32kB (UM) 12*64kB (M) 5*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33028kB
[ 1244.068110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1244.080295] Node 1 Normal: 245*4kB (UM) 117*8kB (UMEH) 39*16kB (UMH) 477*32kB (UMEH) 132*64kB (UMH) 31*128kB (UH) 12*256kB (U) 5*512kB (UM) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (M) = 52236kB
[ 1244.097539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1244.115131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1244.123911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1244.132853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1244.141560] 333 total pagecache pages
[ 1244.145372] 0 pages in swap cache
[ 1244.148822] Swap cache stats: add 0, delete 0, find 0/0
[ 1244.156433] Free swap  = 0kB
[ 1244.159458] Total swap = 0kB
[ 1244.162606] 1965979 pages RAM
[ 1244.165786] 0 pages HighMem/MovableOnly
[ 1244.169796] 339049 pages reserved
[ 1244.173269] 0 pages cma reserved
[ 1244.176650] Out of memory: Kill process 16333 (syz-executor.5) score 1007 or sacrifice child
[ 1244.212329] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1244.224742] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1244.230186] CPU: 0 PID: 16339 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[ 1244.238067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1244.247419] Call Trace:
[ 1244.250028]  dump_stack+0x13e/0x194
[ 1244.253663]  dump_header+0x178/0x6d4
[ 1244.257379]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1244.262398]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1244.267503]  ? ___ratelimit+0x50/0x519
[ 1244.271399]  oom_kill_process.cold+0x10/0xae3
[ 1244.275904]  ? lock_downgrade+0x6e0/0x6e0
[ 1244.280058]  out_of_memory+0x2d5/0x1110
[ 1244.284047]  ? oom_killer_disable+0x1c0/0x1c0
[ 1244.288548]  ? mutex_trylock+0x152/0x1a0
[ 1244.292613]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1244.297476]  ? warn_alloc+0xf0/0xf0
[ 1244.301104]  ? find_held_lock+0x2d/0x110
[ 1244.305171]  ? fs_reclaim_acquire+0x10/0x10
[ 1244.309517]  __alloc_pages_nodemask+0x5d3/0x700
[ 1244.314211]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1244.319247]  cache_grow_begin+0x7b/0x410
[ 1244.323311]  ? __cpuset_node_allowed+0xfa/0x450
[ 1244.327980]  fallback_alloc+0x205/0x2b0
[ 1244.331956]  kmem_cache_alloc+0x1ea/0x770
[ 1244.336111]  ? retint_kernel+0x2d/0x2d
[ 1244.340004]  getname_flags+0xc8/0x560
[ 1244.343810]  do_sys_open+0x1c4/0x3f0
[ 1244.347526]  ? filp_open+0x60/0x60
[ 1244.351073]  ? do_sys_open+0x3f0/0x3f0
[ 1244.354961]  do_syscall_64+0x1d5/0x640
[ 1244.358856]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1244.364045] RIP: 0033:0x416241
[ 1244.367240] RSP: 002b:00007fd1bf083bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 1244.374955] RAX: ffffffffffffffda RBX: 00007fd1bf0846d4 RCX: 0000000000416241
[ 1244.382223] RDX: 000000000040481f RSI: 0000000000000002 RDI: 00007fd1bf083bd0
[ 1244.389490] RBP: 000000000076c100 R08: 0000000000000000 R09: 000000000000001b
[ 1244.396765] R10: 0000000000000006 R11: 0000000000000293 R12: 00000000ffffffff
[ 1244.404039] R13: 0000000000000c19 R14: 00000000004ce0bc R15: 000000000076c10c
[ 1244.423743] Mem-Info:
[ 1244.426190] active_anon:1330119 inactive_anon:200 isolated_anon:0
[ 1244.426190]  active_file:49 inactive_file:0 isolated_file:0
[ 1244.426190]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1244.426190]  slab_reclaimable:16879 slab_unreclaimable:111037
[ 1244.426190]  mapped:52229 shmem:258 pagetables:30276 bounce:0
[ 1244.426190]  free:24052 free_pcp:0 free_cma:0
[ 1244.472282] Node 0 active_anon:1873960kB inactive_anon:780kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208916kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1244.512955] Node 1 active_anon:3446516kB inactive_anon:20kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1244.553547] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1244.593561] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1244.598640] Node 0 DMA32 free:33580kB min:36272kB low:45340kB high:54408kB active_anon:1869532kB inactive_anon:780kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19008kB pagetables:50520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1244.641122] lowmem_reserve[]: 0 0 0 0 0
[ 1244.645150] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1244.684487] lowmem_reserve[]: 0 0 0 0 0
[ 1244.688516] Node 1 Normal free:52240kB min:53612kB low:67012kB high:80412kB active_anon:3446516kB inactive_anon:20kB active_file:28kB inactive_file:72kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21664kB pagetables:70584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1244.730286] lowmem_reserve[]: 0 0 0 0 0
[ 1244.734325] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1244.763024] Node 0 DMA32: 237*4kB (UME) 847*8kB (UMEH) 524*16kB (UMEH) 469*32kB (UM) 11*64kB (M) 10*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33612kB
[ 1244.791225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1244.815915] Node 1 Normal: 246*4kB (UM) 117*8kB (UMEH) 39*16kB (UMH) 477*32kB (UMEH) 132*64kB (UMH) 31*128kB (UH) 12*256kB (U) 5*512kB (UM) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (M) = 52240kB
[ 1244.845897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1244.867859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1244.879744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1244.901574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1244.919819] 309 total pagecache pages
[ 1244.926889] 0 pages in swap cache
[ 1244.939979] Swap cache stats: add 0, delete 0, find 0/0
[ 1244.949505] Free swap  = 0kB
[ 1244.965627] Total swap = 0kB
[ 1244.968665] 1965979 pages RAM
[ 1244.978214] 0 pages HighMem/MovableOnly
[ 1244.988640] 339049 pages reserved
[ 1244.998561] 0 pages cma reserved
[ 1245.008341] Out of memory: Kill process 2627 (syz-executor.5) score 1007 or sacrifice child
[ 1245.029755] Killed process 2627 (syz-executor.5) total-vm:75360kB, anon-rss:16580kB, file-rss:34816kB, shmem-rss:0kB
18:24:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:24:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x6a940)

18:24:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
r9 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xfec0)
preadv(r9, &(0x7f00000000c0), 0x2, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)

18:24:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r3, 0x0, 0x0)
ioprio_set$uid(0x3, r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000200)={0x6, 0x0, 0x0, 0xc7, 0x2, 0x5})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r7=>0xffffffffffffffff, r6, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30)
r8 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xfec0)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1618, 0x24, 0x10, 0x70bd28, 0x25dfdbff, {0x1d}, [@nested={0x116, 0x35, 0x0, 0x1, [@generic="b89eb71d70681b227c16d57d9bce67fee957fbce6bb1e5059ca502f989f1b170a2fae6e11137749756b568c36fc9b5126979098f7cf5f17b6f895c060f714b2c9b81ea95b84ff122613b8d9b55ff46da1d24d83d1f57893eb23fb1cac1151f6daeeea98bd2a54224bcce150f267d04687da24e1271878f284ff22820ceaabd9ca6eb209db3499bc203c68f88e2a0ba02b3681d997d", @generic="0d91bc6b7240326678e71ebfba7bd64d3e8d19a83fd5068560df3cda9b31bf52592a518d44adacbf09c5049e4fe08b6201c6ac8621d740244e5f3f628c49dae5a66c7272b2ffb72138", @typed={0x12, 0x78, 0x0, 0x0, @binary="e46a524fe8b270cbc238f28ed9f5"}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@rand_addr="dbab0321d7158ba8d26313937cb2f51a"}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x40}]}, @nested={0xc, 0x4c, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @uid=r3}]}, @generic="8a5bbdf59b455a2f6f214ca247446b9685ccc015dc8cc07d8e15a503ad48f9d6c9605ce029e34e30c262d755062b41cc8e6be045a5f4cea0970cb2b5085ea0c809dd8567a945a05eefc7ab817e7b8de9daf6170ec80afe71b27a56457b79266d4d10a7935a024ac86bdca74d081fff0251db871178dafaa036df46381c7957f2562db5b52bbbae", @nested={0x192, 0x11, 0x0, 0x1, [@typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}, @generic="831dcea540ca338a557b1d1d098b7bbe174eb7b9a9a41a9cae652eb1a25bdccbca5802232a7b7645500c8d895f2d40912b10af15c63224f20b34c76a29c0e2bd0d63208a1d4afdf43744762bb43763d42f976d66d651f6e6247bd9688915b393d4cac0ef073ea34fb39b56fadf93431292e4f3cd2e76fe57e53dffda78da2d956745b0321a9a1ced320517aab90b0fc01f995e150ab6cfe2e52f2bf7384bacf61db26f5c0716f53aa4ca2795a354", @generic="980630cc113fe7c6b884", @typed={0x13, 0x8b, 0x0, 0x0, @str=']systemselinux\x00'}, @generic="54f9080f8ab0b8d6415b6fd300bd9c56e3464c9da53a53a046ca15dc114298bdb8b687e3ec740aed322e7ede8d359898f8be11099ef5d003d717b3a3e7617c942a42a5ce7f022a4908ae53bb9216b354043298a31e31827ff1611d593a1991d529851e8313c2b07cb98ccc619d2dc901c7d77973603f3d8525b07687d0e99d30c0b320eae9c82f0be414cdfafefce7bfcfe0290b1b78ff00dcbaab9ab5bc465538ad67868031c58e43e6cfa80812"]}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r4}, @generic="91005ff37a7cf66427ac9031d97a177a966e0df09a0b2b00f525636f62e5def08c322f6982927bfd2ad9c688de1b90d0b382b918fe8970ad135073150abfe61db76e16f55be3a8efada0748fe51426994f011cf50ad72193c39d7cadeb942f493323514f3d33bcfc1dcb1b013a817e3f42871842a026ccfa3a1ab917afeda26a4fbacb835f39a22ad37b062438b827850095c9d98faeeb266778cdd970cd8538d9801f3b6cf6ea3b931ef6ddb063d7ac1ca87e820242eb1788f338bb6669cf9824c185cd9ca57c7f4a3aaef1dc3a29f6eac91274cad460a24daf39cb6f04b92a832a03cc26356d9eb8b0989b7b8a", @nested={0x1149, 0x51, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r5}, @typed={0x1004, 0x5b, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x1b, 0x0, 0x0, @str='*!em1(-\x00'}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @typed={0xdd, 0x45, 0x0, 0x0, @binary="e1e7e6f0cf21500ba84bc048b6a62ea9264060b10e09f35dc14bdd33a65db12c8a054ebcb2ef200d9b3794bdf74a501283108003d82d46b847484c3104b2f6bf01311f5bd3e6564c4d2c863f0a252f682412721f59d51ad98e2ed8ff51ae505e9338df80611dd7053cb5a4371a674f0bf6851c5d8316409ce5f5a09b73a1098cd767d5789f6286a952b2a061bcf7f60a9f18a370c4aaf3866cf87473fd831356dcaac436c805b37a6c44cd681005bc4d3c4b29acd114247722101becb6e04356d458ed8243d93cbdecd6fed67bf14232d1ca462ef894c67865"}, @typed={0x4, 0x56}, @typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}, @generic="797b8ae3a8ab4f132140df61d422e4513a5ee8b23c0a4d6330aa82490f81fc4a5719dc631fa339aedb3f9af556ee82d921", @typed={0x8, 0xf, 0x0, 0x0, @pid=r7}]}, @typed={0x11, 0x3c, 0x0, 0x0, @binary="4296331d4571fb8732773aa63f"}, @typed={0x62, 0x88, 0x0, 0x0, @binary="a27ccace8b57ba418ea05f7920d96aa05fd10685c79e0986fa91d723f3b9f52f217e9e97aab4ebb089381c44625e7c54fe0a9d2e25137dc7d5f62606a5b3666c125e9f92873136c78a1d5173541ae2027f808d933b99e4273c497e19f93b"}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r8}]}, 0x1618}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b2000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x4004004, &(0x7f0000618000)={0x2, 0x4e24, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b2000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b2000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)

18:24:19 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000000)={0xe, {0x7, 0x5, 0x9c, 0x5f, "afb7b6a726e1d5472e14a7e0942c77d0c6d1e148689ae2b8ca4f8109b6fb22cdf25d15f803eda7cc3f81b37765223b5b4081901032637d60d2fd2e44cf607715e79852abf6585d54f9e1661af9f0f4462f27c5be5f75d048fa897d2651c796"}}, 0x6b)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @remote}, @address_reply}}, 0x2a)

18:24:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000000180), 0x0, 0x1, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
accept$nfc_llcp(r2, &(0x7f00000014c0), &(0x7f0000001340)=0x60)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001, 0x1}, {0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400000}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfec0)
vmsplice(r4, &(0x7f0000001580)=[{&(0x7f0000001540)="95572a8ff2b9"}], 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x25, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000001700)=""/265)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f00000000c0)='\x00', 0x220300, 0x3c7)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
r8 = socket$inet(0x2, 0x2, 0xfc)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:24:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b200000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:20 executing program 1:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
prlimit64(r0, 0xf, &(0x7f0000000280)={0x37ce, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f0000001940)=[{&(0x7f00000014c0)=""/82, 0x52}, {&(0x7f00000019c0)=""/86, 0x2d}, {&(0x7f00000015c0)=""/146, 0x92}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000001ac0)=""/152, 0x8c}, {&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001a40)=""/97, 0x61}, {&(0x7f0000001840)=""/254, 0xfe}], 0x1000000000000114, 0x0)
r6 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001340)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000001300)="b12e4a3704", 0x5, 0x4010, &(0x7f00000013c0)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x16)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000001480)=""/35, 0x23}], 0x1, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:24:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0)

18:24:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:21 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:24:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1249.323407] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1249.384266] modprobe cpuset=/ mems_allowed=0-1
[ 1249.399112] CPU: 0 PID: 16483 Comm: modprobe Not tainted 4.14.172-syzkaller #0
[ 1249.406503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1249.415878] Call Trace:
[ 1249.418475]  dump_stack+0x13e/0x194
[ 1249.422116]  dump_header+0x178/0x6d4
[ 1249.425838]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1249.430860]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1249.435969]  ? ___ratelimit+0x50/0x519
[ 1249.439872]  oom_kill_process.cold+0x10/0xae3
[ 1249.444378]  ? lock_downgrade+0x6e0/0x6e0
[ 1249.448538]  out_of_memory+0x2d5/0x1110
[ 1249.452523]  ? oom_killer_disable+0x1c0/0x1c0
[ 1249.457026]  ? mutex_trylock+0x152/0x1a0
[ 1249.461121]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1249.465985]  ? warn_alloc+0xf0/0xf0
[ 1249.469616]  ? find_held_lock+0x2d/0x110
[ 1249.473682]  ? fs_reclaim_acquire+0x10/0x10
[ 1249.478020]  __alloc_pages_nodemask+0x5d3/0x700
[ 1249.482698]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1249.487769]  cache_grow_begin+0x7b/0x410
[ 1249.491835]  ? __cpuset_node_allowed+0xfa/0x450
[ 1249.496509]  fallback_alloc+0x205/0x2b0
[ 1249.500493]  kmem_cache_alloc+0x1ea/0x770
[ 1249.504644]  ? memcpy+0x35/0x50
[ 1249.507932]  getname_flags+0xc8/0x560
[ 1249.511741]  user_path_at_empty+0x2a/0x50
[ 1249.515897]  SyS_access+0x21a/0x680
[ 1249.519531]  ? SyS_faccessat+0x680/0x680
[ 1249.523595]  ? __do_page_fault+0x35b/0xb40
[ 1249.527839]  ? do_syscall_64+0x4c/0x640
[ 1249.531872]  ? SyS_faccessat+0x680/0x680
[ 1249.535940]  do_syscall_64+0x1d5/0x640
[ 1249.539839]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1249.545028] RIP: 0033:0x7f1ab8248267
[ 1249.548758] RSP: 002b:00007ffc25280708 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[ 1249.556478] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ab8248267
[ 1249.563751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f1ab824c2e6
[ 1249.571025] RBP: 00007ffc252807a0 R08: 000000000000003c R09: 0000000000000000
[ 1249.578297] R10: 00007ffc253b6120 R11: 0000000000000246 R12: 0000000000000001
[ 1249.585571] R13: 0000000000000004 R14: 00007f1ab8453758 R15: 00007f1ab824c931
[ 1249.654528] Mem-Info:
[ 1249.661859] active_anon:1327613 inactive_anon:200 isolated_anon:0
[ 1249.661859]  active_file:424 inactive_file:403 isolated_file:65
[ 1249.661859]  unevictable:0 dirty:45 writeback:8 unstable:0
[ 1249.661859]  slab_reclaimable:16881 slab_unreclaimable:111792
[ 1249.661859]  mapped:52924 shmem:258 pagetables:30467 bounce:0
[ 1249.661859]  free:24466 free_pcp:29 free_cma:0
[ 1249.696203] Node 0 active_anon:1864040kB inactive_anon:792kB active_file:1572kB inactive_file:1424kB unevictable:0kB isolated(anon):0kB isolated(file):260kB mapped:211464kB dirty:156kB writeback:56kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1249.725407] Node 1 active_anon:3446392kB inactive_anon:8kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1249.754050] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1249.799979] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1249.818314] Node 0 DMA32 free:35916kB min:36272kB low:45340kB high:54408kB active_anon:1859240kB inactive_anon:792kB active_file:1464kB inactive_file:1192kB unevictable:0kB writepending:212kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19424kB pagetables:51280kB bounce:0kB free_pcp:536kB local_pcp:44kB free_cma:0kB
[ 1249.853486] lowmem_reserve[]: 0 0 0 0 0
[ 1249.857509] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1249.892647] lowmem_reserve[]: 0 0 0 0 0
[ 1249.896774] Node 1 Normal free:52724kB min:53612kB low:67012kB high:80412kB active_anon:3446392kB inactive_anon:8kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21632kB pagetables:70580kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1249.934817] lowmem_reserve[]: 0 0 0 0 0
[ 1249.938921] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1249.960971] Node 0 DMA32: 1392*4kB (UME) 508*8kB (UME) 511*16kB (UME) 448*32kB (UMEH) 25*64kB (M) 24*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37072kB
[ 1249.982370] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1249.996137] Node 1 Normal: 247*4kB (UM) 139*8kB (UMEH) 44*16kB (UMH) 478*32kB (UMEH) 135*64kB (UMH) 31*128kB (UH) 12*256kB (U) 5*512kB (UM) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (M) = 52724kB
[ 1250.022404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1250.036862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1250.045577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1250.060354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1250.068957] 575 total pagecache pages
[ 1250.077719] 0 pages in swap cache
[ 1250.082766] Swap cache stats: add 0, delete 0, find 0/0
[ 1250.088217] Free swap  = 0kB
[ 1250.095837] Total swap = 0kB
[ 1250.098974] 1965979 pages RAM
[ 1250.109088] 0 pages HighMem/MovableOnly
[ 1250.119209] 339049 pages reserved
[ 1250.129325] 0 pages cma reserved
[ 1250.139442] Out of memory: Kill process 16419 (syz-executor.5) score 1007 or sacrifice child
[ 1250.162426] Killed process 16419 (syz-executor.5) total-vm:74964kB, anon-rss:16556kB, file-rss:34908kB, shmem-rss:0kB
[ 1250.243134] oom_reaper: reaped process 16419 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:24:22 executing program 1:
prlimit64(0x0, 0xc, &(0x7f0000000180)={0x800000000000804, 0x6}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f0000000180), 0x0, 0x200)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, 0x0, 0x0, 0x0)

18:24:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1251.347127] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1251.393306] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[ 1251.405930] CPU: 1 PID: 16506 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[ 1251.413852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1251.423216] Call Trace:
[ 1251.425818]  dump_stack+0x13e/0x194
[ 1251.429456]  dump_header+0x178/0x6d4
[ 1251.433177]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1251.438189]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1251.443295]  ? ___ratelimit+0x50/0x519
[ 1251.447188]  oom_kill_process.cold+0x10/0xae3
[ 1251.451686]  ? lock_downgrade+0x6e0/0x6e0
[ 1251.455836]  out_of_memory+0x2d5/0x1110
[ 1251.459812]  ? oom_killer_disable+0x1c0/0x1c0
[ 1251.464301]  ? mutex_trylock+0x152/0x1a0
[ 1251.468379]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1251.473232]  ? warn_alloc+0xf0/0xf0
[ 1251.476853]  ? find_held_lock+0x2d/0x110
[ 1251.480909]  ? fs_reclaim_acquire+0x10/0x10
[ 1251.485844]  __alloc_pages_nodemask+0x5d3/0x700
[ 1251.490509]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1251.495516]  ? find_held_lock+0x2d/0x110
[ 1251.499580]  ? cache_grow_begin+0x32d/0x410
[ 1251.503898]  cache_grow_begin+0x7b/0x410
[ 1251.507952]  ? __cpuset_node_allowed+0xfa/0x450
[ 1251.512617]  fallback_alloc+0x205/0x2b0
[ 1251.516590]  kmem_cache_alloc+0x1ea/0x770
[ 1251.520807]  getname_flags+0xc8/0x560
[ 1251.524621]  do_sys_open+0x1c4/0x3f0
[ 1251.528331]  ? filp_open+0x60/0x60
[ 1251.531875]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1251.536277]  ? do_syscall_64+0x4c/0x640
[ 1251.540242]  ? do_sys_open+0x3f0/0x3f0
[ 1251.544123]  do_syscall_64+0x1d5/0x640
[ 1251.548011]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1251.553208] RIP: 0033:0x416241
[ 1251.556401] RSP: 002b:00007fa18e614bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 1251.564112] RAX: ffffffffffffffda RBX: 00007fa18e6156d4 RCX: 0000000000416241
[ 1251.571383] RDX: 00007fa18e614be1 RSI: 0000000000000002 RDI: 00007fa18e614bd0
[ 1251.578660] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000011
[ 1251.585931] R10: 0000000000000006 R11: 0000000000000293 R12: 00000000ffffffff
[ 1251.593193] R13: 0000000000000c19 R14: 00000000004ce0bc R15: 000000000076c06c
[ 1251.649705] Mem-Info:
[ 1251.673816] active_anon:1327656 inactive_anon:200 isolated_anon:0
[ 1251.673816]  active_file:536 inactive_file:565 isolated_file:56
[ 1251.673816]  unevictable:0 dirty:65 writeback:1 unstable:0
[ 1251.673816]  slab_reclaimable:16926 slab_unreclaimable:111714
[ 1251.673816]  mapped:53115 shmem:258 pagetables:30491 bounce:0
[ 1251.673816]  free:24145 free_pcp:11 free_cma:0
[ 1251.798684] Node 0 active_anon:1861732kB inactive_anon:792kB active_file:1136kB inactive_file:1032kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:211024kB dirty:240kB writeback:4kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1251.827455] Node 1 active_anon:3448928kB inactive_anon:8kB active_file:24kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:28kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1251.884776] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1251.918256] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1251.942346] Node 0 DMA32 free:36856kB min:36272kB low:45340kB high:54408kB active_anon:1857232kB inactive_anon:792kB active_file:1088kB inactive_file:1456kB unevictable:0kB writepending:268kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19520kB pagetables:51388kB bounce:0kB free_pcp:488kB local_pcp:288kB free_cma:0kB
[ 1251.978153] lowmem_reserve[]: 0 0 0 0 0
[ 1252.006070] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1252.097776] lowmem_reserve[]: 0 0 0 0 0
[ 1252.101892] Node 1 Normal free:52780kB min:53612kB low:67012kB high:80412kB active_anon:3448984kB inactive_anon:8kB active_file:20kB inactive_file:36kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21632kB pagetables:70584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1252.159531] lowmem_reserve[]: 0 0 0 0 0
[ 1252.166143] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1252.183844] Node 0 DMA32: 1205*4kB (UMEH) 543*8kB (UMEH) 546*16kB (UME) 458*32kB (UMEH) 42*64kB (M) 24*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38572kB
[ 1252.232158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1252.249643] Node 1 Normal: 113*4kB (UM) 297*8kB (UMEH) 40*16kB (UMH) 469*32kB (UMEH) 132*64kB (UH) 32*128kB (UMH) 13*256kB (UM) 4*512kB (U) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (M) = 52780kB
[ 1252.272399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1252.281611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1252.290423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1252.299465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1252.310910] 584 total pagecache pages
[ 1252.314850] 0 pages in swap cache
[ 1252.318426] Swap cache stats: add 0, delete 0, find 0/0
[ 1252.324012] Free swap  = 0kB
[ 1252.327288] Total swap = 0kB
[ 1252.330460] 1965979 pages RAM
[ 1252.333670] 0 pages HighMem/MovableOnly
[ 1252.337798] 339049 pages reserved
[ 1252.341435] 0 pages cma reserved
[ 1252.345616] Out of memory: Kill process 16501 (syz-executor.5) score 1007 or sacrifice child
[ 1253.259288] syz-executor.1 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1253.343352] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[ 1253.362746] CPU: 1 PID: 16506 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0
[ 1253.370712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1253.380068] Call Trace:
[ 1253.382663]  dump_stack+0x13e/0x194
[ 1253.386319]  dump_header+0x178/0x6d4
[ 1253.390037]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1253.395057]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1253.400164]  ? ___ratelimit+0x50/0x519
[ 1253.404108]  oom_kill_process.cold+0x10/0xae3
[ 1253.408605]  ? lock_acquire+0x170/0x3f0
[ 1253.412599]  ? lock_downgrade+0x6e0/0x6e0
[ 1253.416771]  out_of_memory+0x2d5/0x1110
[ 1253.420750]  ? oom_killer_disable+0x1c0/0x1c0
[ 1253.425239]  ? mutex_trylock+0x152/0x1a0
[ 1253.429296]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1253.434152]  ? warn_alloc+0xf0/0xf0
[ 1253.437775]  ? find_held_lock+0x2d/0x110
[ 1253.441832]  ? fs_reclaim_acquire+0x10/0x10
[ 1253.446169]  __alloc_pages_nodemask+0x5d3/0x700
[ 1253.450856]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1253.455876]  ? find_held_lock+0x2d/0x110
[ 1253.461765]  ? cache_grow_begin+0x32d/0x410
[ 1253.466088]  cache_grow_begin+0x7b/0x410
[ 1253.470163]  ? __cpuset_node_allowed+0xfa/0x450
[ 1253.474829]  fallback_alloc+0x205/0x2b0
[ 1253.478804]  kmem_cache_alloc+0x1ea/0x770
[ 1253.482967]  getname_flags+0xc8/0x560
[ 1253.486785]  do_sys_open+0x1c4/0x3f0
[ 1253.490499]  ? filp_open+0x60/0x60
[ 1253.494044]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1253.498450]  ? do_syscall_64+0x4c/0x640
[ 1253.502418]  ? do_sys_open+0x3f0/0x3f0
[ 1253.506299]  do_syscall_64+0x1d5/0x640
[ 1253.511935]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1253.517119] RIP: 0033:0x416241
[ 1253.520301] RSP: 002b:00007fa18e614bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[ 1253.528006] RAX: ffffffffffffffda RBX: 00007fa18e6156d4 RCX: 0000000000416241
[ 1253.535271] RDX: 00007fa18e614be1 RSI: 0000000000000002 RDI: 00007fa18e614bd0
[ 1253.542576] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000011
[ 1253.549850] R10: 0000000000000006 R11: 0000000000000293 R12: 00000000ffffffff
[ 1253.557117] R13: 0000000000000c19 R14: 00000000004ce0bc R15: 000000000076c06c
[ 1253.585641] Mem-Info:
[ 1253.588265] active_anon:1327647 inactive_anon:200 isolated_anon:0
[ 1253.588265]  active_file:264 inactive_file:242 isolated_file:30
[ 1253.588265]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1253.588265]  slab_reclaimable:16927 slab_unreclaimable:111670
[ 1253.588265]  mapped:52707 shmem:258 pagetables:30443 bounce:0
[ 1253.588265]  free:24836 free_pcp:109 free_cma:0
[ 1253.635006] Node 0 active_anon:1861604kB inactive_anon:792kB active_file:1048kB inactive_file:936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210828kB dirty:0kB writeback:0kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1253.719782] Node 1 active_anon:3448984kB inactive_anon:8kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1253.764694] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1253.838928] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1253.844210] Node 0 DMA32 free:37684kB min:36272kB low:45340kB high:54408kB active_anon:1857176kB inactive_anon:792kB active_file:248kB inactive_file:772kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19232kB pagetables:51188kB bounce:0kB free_pcp:1048kB local_pcp:360kB free_cma:0kB
[ 1253.873867] lowmem_reserve[]: 0 0 0 0 0
[ 1253.877881] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1253.904098] lowmem_reserve[]: 0 0 0 0 0
[ 1253.908110] Node 1 Normal free:52796kB min:53612kB low:67012kB high:80412kB active_anon:3448984kB inactive_anon:8kB active_file:8kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21632kB pagetables:70584kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1253.938309] lowmem_reserve[]: 0 0 0 0 0
[ 1253.946318] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1253.962510] Node 0 DMA32: 1105*4kB (UMEH) 562*8kB (MEH) 548*16kB (UME) 465*32kB (UMEH) 42*64kB (M) 24*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38580kB
[ 1253.978522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1253.990567] Node 1 Normal: 113*4kB (UM) 295*8kB (UMEH) 40*16kB (UMH) 470*32kB (UMEH) 132*64kB (UH) 32*128kB (UMH) 13*256kB (UM) 4*512kB (U) 2*1024kB (UE) 1*2048kB (U) 3*4096kB (M) = 52796kB
[ 1254.008819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1254.018505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1254.028507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1254.038139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1254.047164] 326 total pagecache pages
[ 1254.052455] 0 pages in swap cache
[ 1254.056436] Swap cache stats: add 0, delete 0, find 0/0
[ 1254.062726] Free swap  = 0kB
[ 1254.066781] Total swap = 0kB
[ 1254.070807] 1965979 pages RAM
[ 1254.074890] 0 pages HighMem/MovableOnly
[ 1254.079470] 339049 pages reserved
[ 1254.086688] 0 pages cma reserved
[ 1254.090669] Out of memory: Kill process 16512 (syz-executor.5) score 1007 or sacrifice child
[ 1254.099805] Killed process 16512 (syz-executor.5) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[ 1254.252291] oom_reaper: reaped process 16512 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:24:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, 0x0, 0x0, 0x0)

18:24:26 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000088640000000060f16f1db4f6c77972c89a01001200907800010000000000000000000000ff5226881a82d8a87287ff08000000000000005746b78f094d4393ddfd4d7f625351a15e10c55f091a77b111bcbb97943d1288e3de6824ce4cb93265b79e0644be5c21cea26dd5b184e3810428134cf9300c3c6d5c1cc2c01650cc9fff676837cfc788ba273713a70fbc71cc57ac9c29206af30000"], 0x2a)

18:24:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x1, 0x7, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:24:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1255.301987] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1255.356745] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1255.379078] CPU: 1 PID: 7526 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[ 1255.386904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1255.396270] Call Trace:
[ 1255.398893]  dump_stack+0x13e/0x194
[ 1255.402550]  dump_header+0x178/0x6d4
[ 1255.406268]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1255.411284]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1255.416386]  ? ___ratelimit+0x50/0x519
[ 1255.420274]  oom_kill_process.cold+0x10/0xae3
[ 1255.424767]  ? lock_downgrade+0x6e0/0x6e0
[ 1255.428911]  out_of_memory+0x2d5/0x1110
[ 1255.432885]  ? oom_killer_disable+0x1c0/0x1c0
[ 1255.437388]  ? mutex_trylock+0x152/0x1a0
[ 1255.441457]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1255.446334]  ? warn_alloc+0xf0/0xf0
[ 1255.449956]  ? find_held_lock+0x2d/0x110
[ 1255.454013]  ? fs_reclaim_acquire+0x10/0x10
[ 1255.458343]  __alloc_pages_nodemask+0x5d3/0x700
[ 1255.463018]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1255.468050]  cache_grow_begin+0x7b/0x410
[ 1255.472110]  ? __cpuset_node_allowed+0xfa/0x450
[ 1255.476778]  fallback_alloc+0x205/0x2b0
[ 1255.480754]  kmem_cache_alloc+0x1ea/0x770
[ 1255.484900]  ? find_held_lock+0x2d/0x110
[ 1255.488962]  getname_flags+0xc8/0x560
[ 1255.492764]  user_path_mountpoint_at+0x23/0x40
[ 1255.497452]  SyS_umount+0x10a/0x340
[ 1255.501085]  ? __detach_mounts+0x2e0/0x2e0
[ 1255.505311]  ? __do_page_fault+0x35b/0xb40
[ 1255.509554]  ? do_syscall_64+0x4c/0x640
[ 1255.513519]  ? __detach_mounts+0x2e0/0x2e0
[ 1255.517745]  do_syscall_64+0x1d5/0x640
[ 1255.521634]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1255.526833] RIP: 0033:0x45eed7
[ 1255.530015] RSP: 002b:00007ffe2dd3d238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1255.537721] RAX: ffffffffffffffda RBX: 0000000000132563 RCX: 000000000045eed7
[ 1255.544982] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe2dd3e370
[ 1255.552244] RBP: 000000000000129d R08: 0000000000000001 R09: 0000000002547940
[ 1255.559506] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2dd3e370
[ 1255.566780] R13: 00007ffe2dd3e360 R14: 0000000000000000 R15: 00007ffe2dd3e370
[ 1255.659437] Mem-Info:
[ 1255.675382] active_anon:1327679 inactive_anon:200 isolated_anon:0
[ 1255.675382]  active_file:384 inactive_file:417 isolated_file:49
[ 1255.675382]  unevictable:0 dirty:55 writeback:0 unstable:0
[ 1255.675382]  slab_reclaimable:16934 slab_unreclaimable:111482
[ 1255.675382]  mapped:52940 shmem:258 pagetables:30487 bounce:0
[ 1255.675382]  free:24575 free_pcp:161 free_cma:0
[ 1255.772306] Node 0 active_anon:1860040kB inactive_anon:792kB active_file:600kB inactive_file:1304kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:210252kB dirty:216kB writeback:0kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1255.803613] Node 1 active_anon:3450676kB inactive_anon:8kB active_file:44kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1255.848305] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1255.918344] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1255.924398] Node 0 DMA32 free:38308kB min:36272kB low:45340kB high:54408kB active_anon:1855332kB inactive_anon:792kB active_file:1068kB inactive_file:872kB unevictable:0kB writepending:216kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19296kB pagetables:51332kB bounce:0kB free_pcp:148kB local_pcp:88kB free_cma:0kB
[ 1255.954832] lowmem_reserve[]: 0 0 0 0 0
[ 1255.959599] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1255.987059] lowmem_reserve[]: 0 0 0 0 0
[ 1256.021004] Node 1 Normal free:52628kB min:53612kB low:67012kB high:80412kB active_anon:3450300kB inactive_anon:8kB active_file:432kB inactive_file:292kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21824kB pagetables:70616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1256.057352] lowmem_reserve[]: 0 0 0 0 0
[ 1256.063331] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1256.079882] Node 0 DMA32: 986*4kB (UME) 680*8kB (UME) 406*16kB (UME) 495*32kB (UMEH) 46*64kB (M) 24*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37992kB
[ 1256.095456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1256.107238] Node 1 Normal: 107*4kB (UM) 461*8kB (UMEH) 79*16kB (UMH) 468*32kB (UMEH) 132*64kB (UH) 31*128kB (UH) 12*256kB (U) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (M) = 52740kB
[ 1256.125709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1256.135391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1256.146767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1256.166117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1256.216560] 540 total pagecache pages
[ 1256.220564] 0 pages in swap cache
[ 1256.224024] Swap cache stats: add 0, delete 0, find 0/0
[ 1256.231305] Free swap  = 0kB
[ 1256.238121] Total swap = 0kB
[ 1256.242606] 1965979 pages RAM
[ 1256.247020] 0 pages HighMem/MovableOnly
[ 1256.253970] 339049 pages reserved
[ 1256.258524] 0 pages cma reserved
[ 1256.262993] Out of memory: Kill process 16526 (syz-executor.5) score 1007 or sacrifice child
[ 1257.354700] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1257.390093] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1257.395522] CPU: 1 PID: 7521 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[ 1257.403321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1257.412695] Call Trace:
[ 1257.415290]  dump_stack+0x13e/0x194
[ 1257.418929]  dump_header+0x178/0x6d4
[ 1257.422650]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1257.427709]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1257.432856]  ? ___ratelimit+0x50/0x519
[ 1257.436793]  oom_kill_process.cold+0x10/0xae3
[ 1257.441298]  ? lock_downgrade+0x6e0/0x6e0
[ 1257.445459]  out_of_memory+0x2d5/0x1110
[ 1257.449440]  ? oom_killer_disable+0x1c0/0x1c0
[ 1257.453937]  ? mutex_trylock+0x152/0x1a0
[ 1257.458003]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1257.462862]  ? warn_alloc+0xf0/0xf0
[ 1257.466494]  ? find_held_lock+0x2d/0x110
[ 1257.470558]  ? fs_reclaim_acquire+0x10/0x10
[ 1257.474894]  __alloc_pages_nodemask+0x5d3/0x700
[ 1257.479576]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1257.484593]  ? find_held_lock+0x2d/0x110
[ 1257.488663]  ? cache_grow_begin+0x32d/0x410
[ 1257.492992]  cache_grow_begin+0x7b/0x410
[ 1257.497059]  ? __cpuset_node_allowed+0xfa/0x450
[ 1257.501736]  fallback_alloc+0x205/0x2b0
[ 1257.505722]  kmem_cache_alloc+0x1ea/0x770
[ 1257.509880]  ? SOFTIRQ_verbose+0x10/0x10
[ 1257.513947]  getname_flags+0xc8/0x560
[ 1257.517750]  ? find_held_lock+0x2d/0x110
[ 1257.521820]  ? SyS_unlinkat+0x70/0x70
[ 1257.525628]  do_unlinkat+0x9e/0x5d0
[ 1257.529268]  ? do_rmdir+0x340/0x340
[ 1257.532902]  ? up_read+0x17/0x30
[ 1257.536270]  ? __do_page_fault+0x35b/0xb40
[ 1257.540508]  ? do_syscall_64+0x4c/0x640
[ 1257.544484]  ? SyS_unlinkat+0x70/0x70
[ 1257.548287]  do_syscall_64+0x1d5/0x640
[ 1257.552187]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1257.557378] RIP: 0033:0x45c1f7
[ 1257.560575] RSP: 002b:00007ffe0d3e6d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 1257.568304] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c1f7
[ 1257.575572] RDX: 00007ffe0d3e6d40 RSI: 00007ffe0d3e6d40 RDI: 00007ffe0d3e6dd0
[ 1257.582843] RBP: 00000000000015e9 R08: 0000000000000000 R09: 0000000000000011
[ 1257.590114] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe0d3e7e60
[ 1257.597407] R13: 0000000001d64940 R14: 0000000000000000 R15: 00007ffe0d3e7e60
[ 1257.604963] Mem-Info:
[ 1257.607393] active_anon:1327719 inactive_anon:200 isolated_anon:0
[ 1257.607393]  active_file:40 inactive_file:58 isolated_file:0
[ 1257.607393]  unevictable:0 dirty:1 writeback:0 unstable:0
[ 1257.607393]  slab_reclaimable:16940 slab_unreclaimable:111611
[ 1257.607393]  mapped:52248 shmem:258 pagetables:30491 bounce:0
[ 1257.607393]  free:25074 free_pcp:211 free_cma:0
[ 1257.640893] Node 0 active_anon:1860092kB inactive_anon:792kB active_file:120kB inactive_file:176kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:208972kB dirty:4kB writeback:0kB shmem:1024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1257.668892] Node 1 active_anon:3450784kB inactive_anon:8kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1257.696047] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1257.722756] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1257.727816] Node 0 DMA32 free:36820kB min:36272kB low:45340kB high:54408kB active_anon:1855664kB inactive_anon:792kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19296kB pagetables:51348kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB
[ 1257.756829] lowmem_reserve[]: 0 0 0 0 0
[ 1257.760906] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1257.786499] lowmem_reserve[]: 0 0 0 0 0
[ 1257.790584] Node 1 Normal free:52740kB min:53612kB low:67012kB high:80412kB active_anon:3450784kB inactive_anon:8kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21728kB pagetables:70616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1257.819381] lowmem_reserve[]: 0 0 0 0 0
[ 1257.823447] Node 0 DMA: 3*4kB (UME) 1*8kB (E) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1257.839206] Node 0 DMA32: 1001*4kB (ME) 689*8kB (UME) 394*16kB (UME) 493*32kB (UMEH) 46*64kB (M) 24*128kB (ME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37868kB
[ 1257.854585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1257.865371] Node 1 Normal: 107*4kB (UM) 461*8kB (UMEH) 79*16kB (UMH) 468*32kB (UMEH) 132*64kB (UH) 31*128kB (UH) 12*256kB (U) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UM) 2*4096kB (M) = 52740kB
[ 1257.882616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1257.891503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1257.900144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1257.908990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1257.917608] 455 total pagecache pages
[ 1257.921679] 0 pages in swap cache
[ 1257.925134] Swap cache stats: add 0, delete 0, find 0/0
[ 1257.930544] Free swap  = 0kB
[ 1257.933567] Total swap = 0kB
[ 1257.936589] 1965979 pages RAM
[ 1257.939693] 0 pages HighMem/MovableOnly
[ 1257.943755] 339049 pages reserved
[ 1257.947213] 0 pages cma reserved
[ 1257.950815] Out of memory: Kill process 3029 (syz-executor.2) score 1007 or sacrifice child
[ 1257.959464] Killed process 3029 (syz-executor.2) total-vm:75360kB, anon-rss:16584kB, file-rss:34816kB, shmem-rss:0kB
[ 1258.038609] oom_reaper: reaped process 3029 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:24:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, 0x0, 0x0, 0x0)

18:24:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:24:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'wg1\x00', {0x7, 0x4e22, @multicast1}})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000088640000f0004c56846d42e57800"/26], 0x2a)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400200, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r2=>0x0, 0x8}, &(0x7f0000000100)=0x8)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r2, 0xea}, &(0x7f00000001c0)=0x8)

18:24:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f00000000c0)='./bus\x00', 0x4400c0, 0x2c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:24:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8e}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffff7f}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfec0)
write(r3, &(0x7f0000001300)="b1972e55185c5effba554075c759000000539a4bd81bc5a606dbc3e3c68428e2b9cd740b29e0e601b1cee0cfb81d05b99ed37b361607c76e3c7bed31ae2ab202ccaaec5155eb66f27c6730f9475d8fde85", 0x51)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x20000004, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:25:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYRES16, @ANYRESHEX=r7], 0x2}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:25:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:25:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x80000, 0x8)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xbda3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

[ 1329.365596] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[ 1329.424160] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 1329.437248] CPU: 1 PID: 7513 Comm: syz-fuzzer Not tainted 4.14.172-syzkaller #0
[ 1329.444732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1329.454102] Call Trace:
[ 1329.456696]  dump_stack+0x13e/0x194
[ 1329.460325]  dump_header+0x178/0x6d4
[ 1329.464031]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1329.469041]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1329.474137]  ? ___ratelimit+0x50/0x519
[ 1329.478033]  oom_kill_process.cold+0x10/0xae3
[ 1329.482534]  ? lock_downgrade+0x6e0/0x6e0
[ 1329.486686]  out_of_memory+0x2d5/0x1110
[ 1329.490662]  ? oom_killer_disable+0x1c0/0x1c0
[ 1329.495178]  ? mutex_trylock+0x152/0x1a0
[ 1329.499237]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1329.504092]  ? warn_alloc+0xf0/0xf0
[ 1329.507734]  __alloc_pages_nodemask+0x5d3/0x700
[ 1329.512417]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1329.517432]  ? lock_downgrade+0x6e0/0x6e0
[ 1329.521588]  alloc_pages_current+0xe7/0x1e0
[ 1329.525909]  __page_cache_alloc+0x245/0x3d0
[ 1329.530233]  filemap_fault+0xc21/0x1c30
[ 1329.534242]  ? __lock_page_or_retry+0x8a0/0x8a0
[ 1329.538922]  ? lock_acquire+0x170/0x3f0
[ 1329.542893]  ? ext4_filemap_fault+0x7c/0xb0
[ 1329.547220]  ext4_filemap_fault+0x84/0xb0
[ 1329.551363]  __do_fault+0xfa/0x380
[ 1329.554899]  __handle_mm_fault+0x22e9/0x3280
[ 1329.559303]  ? copy_page_range+0x1d70/0x1d70
[ 1329.563715]  ? find_held_lock+0x2d/0x110
[ 1329.567797]  handle_mm_fault+0x288/0x7a0
[ 1329.571859]  __do_page_fault+0x4bc/0xb40
[ 1329.575922]  ? vmalloc_fault+0xdf0/0xdf0
[ 1329.579990]  ? do_page_fault+0x60/0x4f2
[ 1329.583961]  ? page_fault+0x2f/0x50
[ 1329.587581]  page_fault+0x45/0x50
[ 1329.591029] RIP: 0020:0x13
[ 1329.593860] RSP: dd1600:000000c424b19480 EFLAGS: 00000000
[ 1329.605311] Mem-Info:
[ 1329.620552] active_anon:1331862 inactive_anon:200 isolated_anon:0
[ 1329.620552]  active_file:62 inactive_file:58 isolated_file:9
[ 1329.620552]  unevictable:0 dirty:9 writeback:0 unstable:0
[ 1329.620552]  slab_reclaimable:16552 slab_unreclaimable:111376
[ 1329.620552]  mapped:52268 shmem:258 pagetables:30531 bounce:0
[ 1329.620552]  free:21703 free_pcp:64 free_cma:0
[ 1329.664884] Node 0 active_anon:1874884kB inactive_anon:780kB active_file:72kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208972kB dirty:4kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1329.704344] Node 1 active_anon:3452564kB inactive_anon:20kB active_file:180kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:8kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1329.734484] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1329.766113] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1329.775028] Node 0 DMA32 free:26548kB min:36272kB low:45340kB high:54408kB active_anon:1870456kB inactive_anon:780kB active_file:72kB inactive_file:72kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19360kB pagetables:51288kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1329.810179] lowmem_reserve[]: 0 0 0 0 0
[ 1329.814221] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1329.839819] lowmem_reserve[]: 0 0 0 0 0
[ 1329.850084] Node 1 Normal free:50592kB min:53612kB low:67012kB high:80412kB active_anon:3452564kB inactive_anon:20kB active_file:24kB inactive_file:136kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21696kB pagetables:70836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1329.879005] lowmem_reserve[]: 0 0 0 0 0
[ 1329.883064] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10396kB
[ 1329.898899] Node 0 DMA32: 336*4kB (UME) 237*8kB (UMEH) 304*16kB (UMEH) 440*32kB (UMEH) 19*64kB (ME) 23*128kB (M) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26600kB
[ 1329.914364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1329.925190] Node 1 Normal: 278*4kB (UME) 249*8kB (UMEH) 146*16kB (UMEH) 531*32kB (UMEH) 140*64kB (UMEH) 34*128kB (UMEH) 14*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 50592kB
[ 1329.943692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1329.952691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1329.961360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1329.971412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1329.980107] 326 total pagecache pages
[ 1329.983919] 0 pages in swap cache
[ 1329.987369] Swap cache stats: add 0, delete 0, find 0/0
[ 1329.994198] Free swap  = 0kB
[ 1329.997231] Total swap = 0kB
[ 1330.037241] 1965979 pages RAM
[ 1330.040456] 0 pages HighMem/MovableOnly
[ 1330.044430] 339049 pages reserved
[ 1330.047876] 0 pages cma reserved
[ 1330.053459] Out of memory: Kill process 16567 (syz-executor.5) score 1007 or sacrifice child
[ 1330.066661] Killed process 16567 (syz-executor.5) total-vm:75096kB, anon-rss:16564kB, file-rss:34820kB, shmem-rss:0kB
[ 1330.157776] oom_reaper: reaped process 16567 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1330.515894] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1330.555935] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1330.567125] CPU: 1 PID: 7521 Comm: syz-executor.5 Not tainted 4.14.172-syzkaller #0
[ 1330.574939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1330.584298] Call Trace:
[ 1330.586893]  dump_stack+0x13e/0x194
[ 1330.590533]  dump_header+0x178/0x6d4
[ 1330.594268]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1330.599298]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1330.604419]  ? ___ratelimit+0x50/0x519
[ 1330.608318]  oom_kill_process.cold+0x10/0xae3
[ 1330.612823]  ? lock_downgrade+0x6e0/0x6e0
[ 1330.616989]  out_of_memory+0x2d5/0x1110
[ 1330.620975]  ? oom_killer_disable+0x1c0/0x1c0
[ 1330.625477]  ? mutex_trylock+0x152/0x1a0
[ 1330.629547]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1330.634413]  ? warn_alloc+0xf0/0xf0
[ 1330.638049]  ? find_held_lock+0x2d/0x110
[ 1330.642552]  ? fs_reclaim_acquire+0x10/0x10
[ 1330.646896]  __alloc_pages_nodemask+0x5d3/0x700
[ 1330.651576]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1330.656595]  ? find_held_lock+0x2d/0x110
[ 1330.660680]  ? cache_grow_begin+0x32d/0x410
[ 1330.665023]  cache_grow_begin+0x7b/0x410
[ 1330.669086]  ? __cpuset_node_allowed+0xfa/0x450
[ 1330.673764]  fallback_alloc+0x205/0x2b0
[ 1330.677752]  kmem_cache_alloc+0x1ea/0x770
[ 1330.681915]  ? lock_acquire+0x170/0x3f0
[ 1330.685899]  getname_flags+0xc8/0x560
[ 1330.689715]  do_sys_open+0x1c4/0x3f0
[ 1330.693440]  ? filp_open+0x60/0x60
[ 1330.696989]  ? __do_page_fault+0x35b/0xb40
[ 1330.701233]  ? do_syscall_64+0x4c/0x640
[ 1330.705208]  ? do_sys_open+0x3f0/0x3f0
[ 1330.709100]  do_syscall_64+0x1d5/0x640
[ 1330.713027]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1330.718218] RIP: 0033:0x45a420
[ 1330.721411] RSP: 002b:00007ffe0d3e6c80 EFLAGS: 00000202 ORIG_RAX: 0000000000000002
[ 1330.729125] RAX: ffffffffffffffda RBX: 0000000000144bd5 RCX: 000000000045a420
[ 1330.736404] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffe0d3e7e60
[ 1330.744001] RBP: 00000000000015f6 R08: 0000000000000001 R09: 0000000001d63940
[ 1330.751302] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe0d3e7e60
[ 1330.758588] R13: 00007ffe0d3e7e50 R14: 0000000000000000 R15: 00007ffe0d3e7e60
[ 1330.923274] Mem-Info:
[ 1330.925737] active_anon:1327739 inactive_anon:200 isolated_anon:0
[ 1330.925737]  active_file:21 inactive_file:61 isolated_file:0
[ 1330.925737]  unevictable:0 dirty:2 writeback:0 unstable:0
[ 1330.925737]  slab_reclaimable:16552 slab_unreclaimable:111318
[ 1330.925737]  mapped:52254 shmem:258 pagetables:30502 bounce:0
[ 1330.925737]  free:25544 free_pcp:280 free_cma:0
[ 1330.966950] Node 0 active_anon:1864912kB inactive_anon:780kB active_file:68kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:208940kB dirty:8kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1330.996761] Node 1 active_anon:3446048kB inactive_anon:20kB active_file:144kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:12kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1331.024794] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4428kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1331.052434] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1331.057507] Node 0 DMA32 free:36132kB min:36272kB low:45340kB high:54408kB active_anon:1860484kB inactive_anon:780kB active_file:184kB inactive_file:160kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19264kB pagetables:51200kB bounce:0kB free_pcp:376kB local_pcp:352kB free_cma:0kB
[ 1331.092805] lowmem_reserve[]: 0 0 0 0 0
[ 1331.097110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1331.123004] lowmem_reserve[]: 0 0 0 0 0
[ 1331.128032] Node 1 Normal free:54944kB min:53612kB low:67012kB high:80412kB active_anon:3446076kB inactive_anon:20kB active_file:292kB inactive_file:2072kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21728kB pagetables:70828kB bounce:0kB free_pcp:188kB local_pcp:24kB free_cma:0kB
[ 1331.168201] lowmem_reserve[]: 0 0 0 0 0
[ 1331.172394] Node 0 DMA: 3*4kB (UME) 2*8kB (UE) 2*16kB (ME) 9*32kB (UME) 5*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10396kB
[ 1331.188650] Node 0 DMA32: 794*4kB (UME) 985*8kB (UMEH) 423*16kB (UMEH) 452*32kB (UMEH) 19*64kB (ME) 23*128kB (M) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36704kB
[ 1331.204105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1331.214898] Node 1 Normal: 8*4kB (UME) 148*8kB (UMEH) 166*16kB (UMEH) 571*32kB (UMEH) 166*64kB (UMEH) 52*128kB (UMEH) 18*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 55296kB
[ 1331.232824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1331.241733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1331.250404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1331.259245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1331.267934] 665 total pagecache pages
[ 1331.280105] 0 pages in swap cache
[ 1331.283583] Swap cache stats: add 0, delete 0, find 0/0
[ 1331.288940] Free swap  = 0kB
[ 1331.306053] Total swap = 0kB
[ 1331.309117] 1965979 pages RAM
[ 1331.317247] 0 pages HighMem/MovableOnly
[ 1331.330054] 339049 pages reserved
[ 1331.333566] 0 pages cma reserved
[ 1331.336934] Out of memory: Kill process 3278 (syz-executor.2) score 1007 or sacrifice child
[ 1331.354713] Killed process 3278 (syz-executor.2) total-vm:75360kB, anon-rss:16584kB, file-rss:34816kB, shmem-rss:0kB
18:25:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r0 = socket$inet6(0xa, 0x800, 0x7f)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r1, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r2 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0)
r3 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f00000000c0)='./bus\x00', 0x541042, 0x0)
pipe(&(0x7f0000001300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r5, r6, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:26:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000012c0))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write(r0, &(0x7f0000001240)="f7be11bad9162ba13caf7c88a8db0f6a35f4b49dd0e56b11516dc3ae58e261d628f796b59b5652be3709b3285f7c9d5b5be4b6b0b80d322c123175cd90e7f5c3c158d086cd178270295864d495", 0x4d)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r1, &(0x7f00000017c0), 0x375, 0x0)

18:26:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:14 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x8, 0x0, [{0x631, 0x0, 0x2}, {0x806, 0x0, 0x1ff}, {0x32e, 0x0, 0x3}, {0x9e5, 0x0, 0x2}, {0xa02, 0x0, 0x1}, {0x34a, 0x0, 0x5}, {0xad6, 0x0, 0x7ff}, {0x26d, 0x0, 0x6}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000004c0)={0x4, 0x1, 0x4, 0x1000000, 0x9, {0x0, 0x7530}, {0x3, 0x1, 0x8, 0x5, 0x2, 0x1f, "f36521bc"}, 0xaa, 0x2, @userptr=0x8, 0x7})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x400002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x44001, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f00000002c0)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x14, 0x2, 0x0, 0x0, "82fa1e5bdd14927a857ecc5f0cddc122e3bbfd82c046ddfefde630f725039ae6ccfd70324d5543dba56724ba4c31cff457a73988eabc6eb49978f8c04a8b7604"}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x4)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000240))
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
getsockname$ax25(r5, &(0x7f0000000600)={{0x3, @netrom}, [@bcast, @netrom, @netrom, @rose, @remote, @null, @remote, @null]}, &(0x7f0000000000)=0x48)

18:26:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:39 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00008864000000000000000000004500001c0000000000019078ac141400e00000011200907800000000"], 0x2a)

18:26:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x9, 0xf5f, 0x9, 0x0, 0x100000000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r8, 0x0, 0x0)
ioprio_set$uid(0x3, r8, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000180)={0x1f, 0xffff305a, {<r9=>r6}, {r8}, 0x400})
prctl$PR_SET_PTRACER(0x59616d61, r9)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xec}], 0x1000000000000409, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x15c})

18:26:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x113402)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:26:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf37", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee5735ea69adb39516fb74e0fa73fec2073a10b53b1bd65cf7d1b9e1f82b4060b5cf87a5bb4ab62ad3493330879bb8da", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:49 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write(r4, &(0x7f0000000340), 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r5 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r5, &(0x7f00000017c0), 0x1a2, 0x0)
r6 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r8, r9, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r10 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r10, &(0x7f00000017c0), 0x375, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r11, 0x0, 0x8000)

18:26:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:49 executing program 2 (fault-call:14 fault-nth:0):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:26:49 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}]}, 0x34}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x100, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff33b}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x88e5}, @val={0x0, 0x0, 0x0, 0x0, 0x2}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @rand_addr=0xffffffff}, @address_reply}}, 0x2a)

18:26:49 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1397.653989] FAULT_INJECTION: forcing a failure.
[ 1397.653989] name failslab, interval 1, probability 0, space 0, times 0
[ 1397.665344] CPU: 0 PID: 16739 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
[ 1397.673249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1397.682614] Call Trace:
[ 1397.685221]  dump_stack+0x13e/0x194
[ 1397.688876]  should_fail.cold+0x10a/0x14b
[ 1397.693045]  should_failslab+0xd6/0x130
[ 1397.697032]  __kmalloc+0x2e9/0x7c0
[ 1397.700580]  ? SOFTIRQ_verbose+0x10/0x10
[ 1397.704652]  ? rw_copy_check_uvector+0x1d4/0x290
[ 1397.709427]  rw_copy_check_uvector+0x1d4/0x290
[ 1397.714025]  ? check_preemption_disabled+0x35/0x240
[ 1397.719061]  import_iovec+0x94/0x360
[ 1397.722789]  ? dup_iter+0x240/0x240
[ 1397.726447]  ? perf_trace_lock+0x109/0x4b0
[ 1397.730705]  vfs_readv+0xb3/0x130
[ 1397.734170]  ? compat_rw_copy_check_uvector+0x320/0x320
[ 1397.740007]  ? find_held_lock+0x2d/0x110
[ 1397.744081]  ? __fget+0x201/0x360
[ 1397.747592]  ? lock_downgrade+0x6e0/0x6e0
[ 1397.751759]  ? __fget+0x228/0x360
[ 1397.755231]  do_preadv+0x161/0x200
[ 1397.758783]  ? do_readv+0x2c0/0x2c0
[ 1397.762423]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1397.766846]  ? do_syscall_64+0x4c/0x640
[ 1397.770833]  ? SyS_writev+0x30/0x30
[ 1397.774475]  do_syscall_64+0x1d5/0x640
[ 1397.778388]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1397.783595] RIP: 0033:0x45c4a9
[ 1397.786787] RSP: 002b:00007f47ef375c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1397.794503] RAX: ffffffffffffffda RBX: 00007f47ef3766d4 RCX: 000000000045c4a9
18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1397.801778] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000007
[ 1397.809055] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[ 1397.816329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 1397.823618] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000000
18:26:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf37", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:50 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x9e183, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd3, 0x620080)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x0, 0x18, [0x6, 0x5, 0x2, 0x2, 0x28e, 0x2b4d]})

18:26:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x8001})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x19b400, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/235)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r1, &(0x7f00000002c0)={@void, @val, @ipv4=@icmp={{0x2a, 0x4, 0x0, 0x3c, 0xb0, 0x4, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1, {[@rr={0x7, 0x7, 0x80, [@local]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x32, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @lsrr={0x83, 0x27, 0x38, [@multicast2, @empty, @local, @local, @multicast2, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x27, 0x74, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @local, @loopback, @loopback, @empty]}, @generic={0x85, 0x5, "660ab4"}, @ssrr={0x89, 0x27, 0x4a, [@local, @empty, @rand_addr=0x54f, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr]}]}}, @address_reply}}, 0xba)

18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574680000000018000200140001000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:50 executing program 2 (fault-call:14 fault-nth:1):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000020", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000020", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1398.519573] audit: type=1400 audit(1583864810.744:12346): avc:  denied  { ioctl } for  pid=16775 comm="syz-executor.4" path="socket:[192105]" dev="sockfs" ino=192105 ioctlcmd=0x8935 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[ 1398.604460] FAULT_INJECTION: forcing a failure.
[ 1398.604460] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1398.616306] CPU: 1 PID: 16781 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
[ 1398.624191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1398.633550] Call Trace:
[ 1398.636151]  dump_stack+0x13e/0x194
[ 1398.639792]  should_fail.cold+0x10a/0x14b
[ 1398.643951]  __alloc_pages_nodemask+0x1bf/0x700
[ 1398.648634]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1398.653684]  ? find_held_lock+0x2d/0x110
[ 1398.657772]  cache_grow_begin+0x7b/0x410
[ 1398.661854]  __kmalloc+0x6dd/0x7c0
[ 1398.665407]  ? rw_copy_check_uvector+0x1d4/0x290
[ 1398.670176]  rw_copy_check_uvector+0x1d4/0x290
[ 1398.674770]  ? check_preemption_disabled+0x35/0x240
[ 1398.679801]  import_iovec+0x94/0x360
[ 1398.683531]  ? dup_iter+0x240/0x240
[ 1398.687167]  ? perf_trace_lock+0x109/0x4b0
[ 1398.691442]  vfs_readv+0xb3/0x130
[ 1398.694929]  ? compat_rw_copy_check_uvector+0x320/0x320
[ 1398.700302]  ? find_held_lock+0x2d/0x110
[ 1398.704372]  ? __fget+0x201/0x360
[ 1398.707860]  ? lock_downgrade+0x6e0/0x6e0
[ 1398.712023]  ? __fget+0x228/0x360
[ 1398.715492]  do_preadv+0x161/0x200
[ 1398.719058]  ? do_readv+0x2c0/0x2c0
[ 1398.722699]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1398.727119]  ? do_syscall_64+0x4c/0x640
[ 1398.731103]  ? SyS_writev+0x30/0x30
[ 1398.734760]  do_syscall_64+0x1d5/0x640
[ 1398.738684]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1398.743900] RIP: 0033:0x45c4a9
[ 1398.747089] RSP: 002b:00007f47ef375c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1398.754803] RAX: ffffffffffffffda RBX: 00007f47ef3766d4 RCX: 000000000045c4a9
[ 1398.762078] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000007
[ 1398.769353] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[ 1398.776847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 1398.784141] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000001
18:26:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf37", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000020", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f0000001300)=ANY=[@ANYBLOB="616c6c6f6373697a654a22c8be0753bfc534469ad2b7eb3d346d2c0025a54b96a34fc38bc08b51987e8b624499d02d0ad27a04902ab7c6bd56915396a504bebf02344433af44d6551c0168e7ff932abbb74bd6e104b94a000000000000000000"])
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')

18:26:51 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfec0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_vif\x00')
r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x800)
kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000180)={r4, r5, 0x236c7fbc})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:26:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:51 executing program 2 (fault-call:14 fault-nth:2):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:26:51 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000040)}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'vlan1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000886401000500000000000000402000610067000083069078ffffffff7f000001008902010083067a559e3b891bb7ac1414bbffffffffac1414aaffffffffac141438fffff03a9663000000000000000000000000000000000000000300004e2000004e24000000000000020400"], 0x6f)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'bridge_slave_0\x00', {0x1}, 0x3})

18:26:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1399.566251] FAULT_INJECTION: forcing a failure.
[ 1399.566251] name failslab, interval 1, probability 0, space 0, times 0
[ 1399.577781] CPU: 1 PID: 16818 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
[ 1399.585687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1399.595116] Call Trace:
[ 1399.597727]  dump_stack+0x13e/0x194
[ 1399.601377]  should_fail.cold+0x10a/0x14b
[ 1399.605555]  should_failslab+0xd6/0x130
[ 1399.609556]  kmem_cache_alloc_node_trace+0x292/0x7b0
[ 1399.614673]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1399.619712]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1399.624480]  __kmalloc_node+0x38/0x70
[ 1399.628289]  kvmalloc_node+0x46/0xd0
[ 1399.632009]  seq_read+0x886/0x1160
[ 1399.635565]  ? avc_policy_seqno+0x5/0x10
[ 1399.639632]  ? selinux_file_permission+0x7a/0x440
[ 1399.644481]  ? seq_lseek+0x3d0/0x3d0
[ 1399.648199]  ? security_file_permission+0x82/0x1e0
[ 1399.653142]  ? rw_verify_area+0xe1/0x2a0
[ 1399.657219]  do_iter_read+0x3e3/0x5a0
[ 1399.661039]  vfs_readv+0xd3/0x130
[ 1399.664500]  ? compat_rw_copy_check_uvector+0x320/0x320
[ 1399.669872]  ? find_held_lock+0x2d/0x110
[ 1399.673942]  ? __fget+0x201/0x360
[ 1399.677411]  ? lock_downgrade+0x6e0/0x6e0
[ 1399.681578]  ? __fget+0x228/0x360
[ 1399.685047]  do_preadv+0x161/0x200
[ 1399.688593]  ? do_readv+0x2c0/0x2c0
[ 1399.692224]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1399.696638]  ? do_syscall_64+0x4c/0x640
[ 1399.700623]  ? SyS_writev+0x30/0x30
[ 1399.704284]  do_syscall_64+0x1d5/0x640
[ 1399.708187]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1399.713378] RIP: 0033:0x45c4a9
[ 1399.716565] RSP: 002b:00007f47ef375c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1399.724286] RAX: ffffffffffffffda RBX: 00007f47ef3766d4 RCX: 000000000045c4a9
[ 1399.731567] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000007
[ 1399.739143] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[ 1399.746417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 1399.753706] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000002
18:26:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:26:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:52 executing program 2 (fault-call:14 fault-nth:3):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:26:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:52 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x3, 0x480000)
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfec0)
fsetxattr(r3, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)='+\x00', 0x2, 0x1)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x4, "3f391be07c8ca8a0db9f2c9270ec1d965ff81f4817087960fb00ee8cd25f78fa", 0x3, 0x1})

[ 1400.496104] FAULT_INJECTION: forcing a failure.
[ 1400.496104] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1400.507967] CPU: 1 PID: 16851 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
[ 1400.515876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1400.525235] Call Trace:
[ 1400.527839]  dump_stack+0x13e/0x194
[ 1400.531481]  should_fail.cold+0x10a/0x14b
[ 1400.535645]  __alloc_pages_nodemask+0x1bf/0x700
[ 1400.540327]  ? save_trace+0x290/0x290
[ 1400.544133]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1400.549169]  cache_grow_begin+0x7b/0x410
[ 1400.553249]  kmem_cache_alloc_node_trace+0x6ca/0x7b0
[ 1400.558370]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1400.563397]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1400.568235]  __kmalloc_node+0x38/0x70
[ 1400.572058]  kvmalloc_node+0x46/0xd0
[ 1400.575792]  seq_read+0x886/0x1160
[ 1400.579356]  ? avc_policy_seqno+0x5/0x10
[ 1400.583448]  ? selinux_file_permission+0x7a/0x440
[ 1400.588337]  ? seq_lseek+0x3d0/0x3d0
18:26:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1400.592068]  ? security_file_permission+0x82/0x1e0
[ 1400.597100]  ? rw_verify_area+0xe1/0x2a0
[ 1400.601175]  do_iter_read+0x3e3/0x5a0
[ 1400.605004]  vfs_readv+0xd3/0x130
[ 1400.608473]  ? compat_rw_copy_check_uvector+0x320/0x320
[ 1400.613844]  ? find_held_lock+0x2d/0x110
[ 1400.617913]  ? __fget+0x201/0x360
[ 1400.621383]  ? lock_downgrade+0x6e0/0x6e0
[ 1400.625978]  ? __fget+0x228/0x360
[ 1400.629443]  do_preadv+0x161/0x200
[ 1400.633003]  ? do_readv+0x2c0/0x2c0
[ 1400.636642]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1400.641069]  ? do_syscall_64+0x4c/0x640
[ 1400.645054]  ? SyS_writev+0x30/0x30
[ 1400.648756]  do_syscall_64+0x1d5/0x640
[ 1400.652763]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1400.657964] RIP: 0033:0x45c4a9
[ 1400.661178] RSP: 002b:00007f47ef375c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1400.668898] RAX: ffffffffffffffda RBX: 00007f47ef3766d4 RCX: 000000000045c4a9
[ 1400.676172] RDX: 0000000000000375 RSI: 00000000200017c0 RDI: 0000000000000007
[ 1400.683453] RBP: 000000000076c060 R08: 0000000000000000 R09: 0000000000000000
[ 1400.690728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 1400.698002] R13: 0000000000000857 R14: 00000000004cadd6 R15: 0000000000000003
18:26:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x372)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$netlink(0x10, 0x3, 0x0)
splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0)
splice(r0, 0x0, r3, 0x0, 0x8, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r7, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r8 = getpid()
sched_setattr(r8, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000001300)=<r10=>0x0)
syz_open_procfs(r10, &(0x7f0000000180)='net/dev_snmp6\x00')

18:26:53 executing program 4:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200201, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth1_to_team\x00', {0xfffffffd}, 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:26:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x4}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1401.104084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.224989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
18:26:53 executing program 2 (fault-call:14 fault-nth:4):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r3, &(0x7f00000017c0), 0x375, 0x0)

18:26:53 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x8, 0xfff, 0x6})
write$tun(r0, &(0x7f0000000280)={@void, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0xb, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x26)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400, 0x90}, 0xc)

18:26:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1401.321583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.420094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.483143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.546686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.600113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
18:26:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

[ 1401.683134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.723099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
[ 1401.760787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16873 comm=syz-executor.1
18:26:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000180)='./bus\x00', 0x2b25c0, 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:26:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:26:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:26:55 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x786f42973793b900, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0)
write$selinux_attr(r2, &(0x7f0000000240)='system_u:object_r:inetd_child_exec_t:s0\x00', 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000886400000000000000000000480000a80000000000019078ac141400e000000144141c91000000050000e314e00000020000089e44249f50000080000000001f00000009000000060000000800000006000000ff00000001861f000000000212b9d6c32568a18ce030a9626facbe1b0e0707a565e55df083119f0a0094222127851d73c7dfe66a3b8923cdac1e0001ac1414aae0000001ffffffa0de261464aa4aad0dac1414aa00000000001200907800000000"], 0xb6)

18:26:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1403.902221] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1403.962365] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1403.979429] CPU: 1 PID: 16922 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[ 1403.987331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1403.996714] Call Trace:
[ 1403.999312]  dump_stack+0x13e/0x194
[ 1404.002951]  dump_header+0x178/0x6d4
[ 1404.006671]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1404.011693]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1404.016803]  ? ___ratelimit+0x50/0x519
[ 1404.020702]  oom_kill_process.cold+0x10/0xae3
[ 1404.025209]  ? lock_downgrade+0x6e0/0x6e0
[ 1404.029370]  out_of_memory+0x2d5/0x1110
[ 1404.033358]  ? oom_killer_disable+0x1c0/0x1c0
[ 1404.037860]  ? mutex_trylock+0x152/0x1a0
[ 1404.041929]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1404.046782]  ? warn_alloc+0xf0/0xf0
[ 1404.050402]  ? find_held_lock+0x2d/0x110
[ 1404.054473]  ? fs_reclaim_acquire+0x10/0x10
[ 1404.058815]  __alloc_pages_nodemask+0x5d3/0x700
[ 1404.063483]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1404.068508]  cache_grow_begin+0x7b/0x410
[ 1404.072562]  ? __cpuset_node_allowed+0xfa/0x450
[ 1404.077327]  fallback_alloc+0x205/0x2b0
[ 1404.081318]  kmem_cache_alloc_node+0xe7/0x7a0
[ 1404.085815]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1404.090313]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1404.095328]  copy_process.part.0+0x17d5/0x6a70
[ 1404.099919]  ? retint_kernel+0x2d/0x2d
[ 1404.103821]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1404.108846]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1404.113607]  ? __cleanup_sighand+0x40/0x40
[ 1404.117832]  ? __do_page_fault+0x4e4/0xb40
[ 1404.122091]  _do_fork+0x180/0xc80
[ 1404.125557]  ? fork_idle+0x270/0x270
[ 1404.129278]  ? perf_swevent_put_recursion_context+0x1a/0xa0
[ 1404.134986]  ? __perf_sw_event+0x4e/0x80
[ 1404.139052]  ? __do_page_fault+0x35b/0xb40
[ 1404.143290]  ? do_syscall_64+0x4c/0x640
[ 1404.147276]  ? sys_vfork+0x20/0x20
[ 1404.150812]  do_syscall_64+0x1d5/0x640
[ 1404.154701]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1404.159900] RIP: 0033:0x45ee79
[ 1404.163082] RSP: 002b:00007ffe2dd3e048 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 1404.170787] RAX: ffffffffffffffda RBX: 00007f8c1ec28700 RCX: 000000000045ee79
[ 1404.178048] RDX: 00007f8c1ec289d0 RSI: 00007f8c1ec27db0 RDI: 00000000003d0f00
[ 1404.185315] RBP: 00007ffe2dd3e260 R08: 00007f8c1ec28700 R09: 00007f8c1ec28700
[ 1404.192578] R10: 00007f8c1ec289d0 R11: 0000000000000202 R12: 0000000000000000
[ 1404.199954] R13: 00007ffe2dd3e0ff R14: 00007f8c1ec289c0 R15: 000000000076bfcc
[ 1404.239919] Mem-Info:
[ 1404.242534] active_anon:1328063 inactive_anon:199 isolated_anon:0
[ 1404.242534]  active_file:413 inactive_file:445 isolated_file:32
[ 1404.242534]  unevictable:0 dirty:7 writeback:0 unstable:0
[ 1404.242534]  slab_reclaimable:16545 slab_unreclaimable:112457
[ 1404.242534]  mapped:53027 shmem:258 pagetables:30883 bounce:0
[ 1404.242534]  free:23200 free_pcp:63 free_cma:0
[ 1404.300114] Node 0 active_anon:1842844kB inactive_anon:784kB active_file:1504kB inactive_file:1532kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:211508kB dirty:28kB writeback:0kB shmem:1016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1404.350808] Node 1 active_anon:3469408kB inactive_anon:12kB active_file:32kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1404.377487] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4512kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.420100] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1404.425189] Node 0 DMA32 free:32060kB min:36272kB low:45340kB high:54408kB active_anon:1838332kB inactive_anon:784kB active_file:1840kB inactive_file:1896kB unevictable:0kB writepending:28kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19744kB pagetables:52520kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB
[ 1404.519069] lowmem_reserve[]: 0 0 0 0 0
[ 1404.529249] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.563166] lowmem_reserve[]: 0 0 0 0 0
[ 1404.567333] Node 1 Normal free:51356kB min:53612kB low:67012kB high:80412kB active_anon:3469408kB inactive_anon:12kB active_file:32kB inactive_file:44kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21792kB pagetables:71012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.619287] lowmem_reserve[]: 0 0 0 0 0
[ 1404.640462] Node 0 DMA: 12*4kB (U) 5*8kB (UE) 2*16kB (UE) 9*32kB (UME) 4*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10392kB
[ 1404.658338] Node 0 DMA32: 1330*4kB (UME) 316*8kB (ME) 7*16kB (ME) 8*32kB (UME) 379*64kB (UME) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34648kB
[ 1404.685721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1404.704062] Node 1 Normal: 83*4kB (UMEH) 802*8kB (UMEH) 748*16kB (UMEH) 488*32kB (UMEH) 164*64kB (UMEH) 31*128kB (UMEH) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51356kB
[ 1404.729068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1404.738616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1404.756384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1404.767111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1404.783495] 335 total pagecache pages
[ 1404.787315] 0 pages in swap cache
[ 1404.794837] Swap cache stats: add 0, delete 0, find 0/0
[ 1404.802596] Free swap  = 0kB
[ 1404.805639] Total swap = 0kB
[ 1404.808684] 1965979 pages RAM
[ 1404.815039] 0 pages HighMem/MovableOnly
[ 1404.819018] 339049 pages reserved
[ 1404.822608] 0 pages cma reserved
[ 1404.825975] Out of memory: Kill process 16920 (syz-executor.5) score 1007 or sacrifice child
[ 1404.859879] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1404.880049] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1404.886092] CPU: 1 PID: 16924 Comm: syz-executor.4 Not tainted 4.14.172-syzkaller #0
[ 1404.893982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1404.903477] Call Trace:
[ 1404.906080]  dump_stack+0x13e/0x194
[ 1404.909717]  dump_header+0x178/0x6d4
[ 1404.913446]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1404.918469]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1404.923582]  ? ___ratelimit+0x50/0x519
[ 1404.927479]  oom_kill_process.cold+0x10/0xae3
[ 1404.931982]  ? lock_acquire+0x170/0x3f0
[ 1404.935962]  ? lock_downgrade+0x6e0/0x6e0
[ 1404.940123]  out_of_memory+0x2d5/0x1110
[ 1404.944109]  ? oom_killer_disable+0x1c0/0x1c0
[ 1404.948611]  ? mutex_trylock+0x152/0x1a0
[ 1404.952679]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1404.957564]  ? warn_alloc+0xf0/0xf0
[ 1404.961220]  __alloc_pages_nodemask+0x5d3/0x700
[ 1404.965905]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1404.970932]  ? find_held_lock+0x2d/0x110
[ 1404.975011]  ? mark_held_locks+0xa6/0xf0
[ 1404.979088]  ? cache_grow_begin+0x32d/0x410
[ 1404.983424]  cache_grow_begin+0x7b/0x410
[ 1404.987515]  ? __cpuset_node_allowed+0xfa/0x450
[ 1404.992190]  fallback_alloc+0x205/0x2b0
[ 1404.996179]  kmem_cache_alloc_node_trace+0xf2/0x7b0
[ 1405.001204]  ? check_preemption_disabled+0x35/0x240
[ 1405.006243]  __kmalloc_node+0x38/0x70
[ 1405.010052]  kvmalloc_node+0x46/0xd0
[ 1405.013777]  tun_attach+0x5d9/0xed0
[ 1405.017422]  ? mod_timer_pending+0xf10/0xf10
[ 1405.021843]  __tun_chr_ioctl+0x206d/0x33d0
[ 1405.026098]  ? tun_chr_close+0x60/0x60
[ 1405.030004]  ? tun_chr_compat_ioctl+0x30/0x30
[ 1405.034508]  do_vfs_ioctl+0x75a/0xfe0
[ 1405.038313]  ? selinux_file_mprotect+0x5c0/0x5c0
[ 1405.043084]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1405.047516]  ? security_file_ioctl+0x76/0xb0
[ 1405.051930]  ? security_file_ioctl+0x83/0xb0
[ 1405.056354]  SyS_ioctl+0x7f/0xb0
[ 1405.059702]  ? do_vfs_ioctl+0xfe0/0xfe0
[ 1405.063673]  do_syscall_64+0x1d5/0x640
[ 1405.067582]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1405.072772] RIP: 0033:0x45c4a9
[ 1405.075960] RSP: 002b:00007f8c1ec48c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1405.083673] RAX: ffffffffffffffda RBX: 00007f8c1ec496d4 RCX: 000000000045c4a9
[ 1405.090951] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000003
[ 1405.098227] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1405.105499] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1405.112770] R13: 00000000000005a2 R14: 00000000004c800f R15: 000000000076bf2c
[ 1405.130320] Mem-Info:
[ 1405.132788] active_anon:1328063 inactive_anon:199 isolated_anon:0
[ 1405.132788]  active_file:17 inactive_file:38 isolated_file:0
[ 1405.132788]  unevictable:0 dirty:2 writeback:0 unstable:0
[ 1405.132788]  slab_reclaimable:16545 slab_unreclaimable:112457
[ 1405.132788]  mapped:52229 shmem:258 pagetables:30883 bounce:0
[ 1405.132788]  free:24159 free_pcp:0 free_cma:0
[ 1405.174420] Node 0 active_anon:1842844kB inactive_anon:784kB active_file:52kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:208916kB dirty:4kB writeback:0kB shmem:1016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1405.208942] Node 1 active_anon:3469408kB inactive_anon:12kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1405.238995] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4512kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1405.268963] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1405.274090] Node 0 DMA32 free:34888kB min:36272kB low:45340kB high:54408kB active_anon:1838332kB inactive_anon:784kB active_file:68kB inactive_file:32kB unevictable:0kB writepending:4kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19648kB pagetables:52520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1405.313108] lowmem_reserve[]: 0 0 0 0 0
[ 1405.317143] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1405.349492] lowmem_reserve[]: 0 0 0 0 0
[ 1405.353597] Node 1 Normal free:51356kB min:53612kB low:67012kB high:80412kB active_anon:3469408kB inactive_anon:12kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21792kB pagetables:71012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1405.389733] lowmem_reserve[]: 0 0 0 0 0
[ 1405.393793] Node 0 DMA: 12*4kB (U) 5*8kB (UE) 2*16kB (UE) 9*32kB (UME) 4*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10392kB
[ 1405.420713] Node 0 DMA32: 1346*4kB (UME) 330*8kB (ME) 9*16kB (ME) 9*32kB (UME) 379*64kB (UME) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34888kB
[ 1405.446989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1405.471141] Node 1 Normal: 83*4kB (UMEH) 802*8kB (UMEH) 748*16kB (UMEH) 488*32kB (UMEH) 164*64kB (UMEH) 31*128kB (UMEH) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51356kB
[ 1405.503143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.537888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1405.562851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.585115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1405.606950] 309 total pagecache pages
[ 1405.613887] 0 pages in swap cache
[ 1405.617351] Swap cache stats: add 0, delete 0, find 0/0
[ 1405.635803] Free swap  = 0kB
[ 1405.638831] Total swap = 0kB
[ 1405.648535] 1965979 pages RAM
[ 1405.658579] 0 pages HighMem/MovableOnly
[ 1405.669147] 339049 pages reserved
[ 1405.685006] 0 pages cma reserved
[ 1405.688398] Out of memory: Kill process 11481 (syz-executor.3) score 1007 or sacrifice child
[ 1405.709300] Killed process 11481 (syz-executor.3) total-vm:75360kB, anon-rss:16580kB, file-rss:34816kB, shmem-rss:0kB
[ 1405.798334] oom_reaper: reaped process 11481 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:26:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
vmsplice(r3, &(0x7f0000001300), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r7, r8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r9, &(0x7f00000017c0), 0x375, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r10, 0x0, 0x8000)

18:26:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee57", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:27:47 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x16a0c1, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00008864000000800000000000004500001c0000000000019078ac141400e0000001a7834547ad13b9271449b0f83a071200907800000000"], 0x2a)

18:28:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:28:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="30879f9ce91c4a8174bb7383bb1867e6a93bdb2fee2b2e87970daef4f4b61331beb65311377371fd8ea687c6af8acbfdda8125c149c5cb484d4199f3b82b69069b84abad40d469e41e78421f3b95482dba3a9aa97735f097407a9b7df34d26377f53afe0c7cc71b9d2a13cbbdd2f5a21eea3f0650c15a640d02f29977304c68ab0255598d3420afbc83627f2bfa9f8651a59dd99bd5af268c46231ba3f2d24d44a486cae0b47b086cb211cf4a1b1b0eab6eff45a5bf3fd8aeccf3739e65c5be431d10d3d27e5ffa095ffdb8c19a446d6d1c5daf84ebe14b8e2842767de50a704c66ca7bd938be6c47230c207f13467f1ab310b3d6de8a8ba601f9cc9f49143fbdeb9724bdd837f60c9912151064c3387bb7e987904ed0dcc88ed4f2c0f9ab60c5de04f5d28c54852bb99ffe7b8bf1a927d92333b6bc952f4b76f2fc2d374b10a8eb1336018bbee57", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:28:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x3, 0x3b)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x14}, @in={0x2, 0x3, @dev}, @ax25={0x3, @default, 0x7}})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="18403c9ec724064376be2393b562a2ebfd807bbf65e1eb4653e1e81ea4eae9a7b65208c06111cbf0ba744e833a628fb94fbb19c3833f246b03ba2f3e8ff9a44c0cb54830fa4cc0fddd1e311f564a3943ea7475cc6f254ee49aed7e2d545b68962cc57a2141b7cb5debaa7bec6857530893f1d793be27eab6a161d3b96ae07081a93dadd1a4d606c80d9de3b7dddea29a698d28432c6590ca34d794b633f030fb34e2ac495e4aa0b95996d129658c0ea584c0af944850e5ea08eaa9bb8d9bf0422fd10da55f7b93e238251388c4df9f1e639ddfee88741fe2797ada98"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$sock(r3, &(0x7f0000000380)=[{{&(0x7f0000000500)=@generic={0x1e, "613bb88890d10b2cc683620d4093da04fff392e9f131a82dd9ab7cf51b9c1c00f63fe7fcac845846c811063dd3c0cd75ea9b71eaeb4c57bdb5e519d456eb315f20c319258c65902ee895bc19b1aeb84ce280857aeffccfa07b8482f58a6acc871254077c94002afa90b228f328695afbf342aa4a88a8a9feb22d0cc45ca9"}, 0x80, 0x0}}], 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2)
read(r5, 0x0, 0x6c00)

[ 1525.837490] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[ 1525.850388] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 1525.855174] CPU: 1 PID: 7499 Comm: syz-fuzzer Not tainted 4.14.172-syzkaller #0
[ 1525.862623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1525.871988] Call Trace:
[ 1525.874581]  dump_stack+0x13e/0x194
[ 1525.878206]  dump_header+0x178/0x6d4
[ 1525.881945]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1525.886961]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1525.892059]  ? ___ratelimit+0x50/0x519
[ 1525.895988]  oom_kill_process.cold+0x10/0xae3
[ 1525.900484]  ? lock_acquire+0x170/0x3f0
[ 1525.904461]  ? lock_downgrade+0x6e0/0x6e0
[ 1525.908635]  out_of_memory+0x2d5/0x1110
[ 1525.912608]  ? oom_killer_disable+0x1c0/0x1c0
[ 1525.917138]  ? mutex_trylock+0x152/0x1a0
[ 1525.921215]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1525.926062]  ? warn_alloc+0xf0/0xf0
[ 1525.929681]  __alloc_pages_nodemask+0x5d3/0x700
[ 1525.934347]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1525.939357]  ? lock_downgrade+0x6e0/0x6e0
[ 1525.943532]  alloc_pages_current+0xe7/0x1e0
[ 1525.947862]  __page_cache_alloc+0x245/0x3d0
[ 1525.952189]  filemap_fault+0xc21/0x1c30
[ 1525.956189]  ? __lock_page_or_retry+0x8a0/0x8a0
[ 1525.960863]  ? lock_acquire+0x170/0x3f0
[ 1525.964839]  ? ext4_filemap_fault+0x7c/0xb0
[ 1525.969183]  ext4_filemap_fault+0x84/0xb0
[ 1525.973343]  __do_fault+0xfa/0x380
[ 1525.976895]  __handle_mm_fault+0x22e9/0x3280
[ 1525.981317]  ? copy_page_range+0x1d70/0x1d70
[ 1525.985723]  ? find_held_lock+0x2d/0x110
[ 1525.989791]  handle_mm_fault+0x288/0x7a0
[ 1525.993854]  __do_page_fault+0x4bc/0xb40
[ 1525.997926]  ? vmalloc_fault+0xdf0/0xdf0
[ 1526.002000]  ? do_page_fault+0x60/0x4f2
[ 1526.005972]  ? page_fault+0x2f/0x50
[ 1526.009591]  page_fault+0x45/0x50
[ 1526.013059] RIP: 00f1:0x11
[ 1526.015893] RSP: 0009:000000c42004ff18 EFLAGS: 0042f0a0
[ 1526.028947] Mem-Info:
[ 1526.036856] active_anon:1329749 inactive_anon:200 isolated_anon:0
[ 1526.036856]  active_file:96 inactive_file:273 isolated_file:0
[ 1526.036856]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1526.036856]  slab_reclaimable:16288 slab_unreclaimable:111346
[ 1526.036856]  mapped:52430 shmem:258 pagetables:30883 bounce:0
[ 1526.036856]  free:23174 free_pcp:291 free_cma:0
[ 1526.076530] Node 0 active_anon:1857744kB inactive_anon:780kB active_file:60kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208920kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1526.113518] Node 1 active_anon:3461252kB inactive_anon:20kB active_file:436kB inactive_file:1620kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1048kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1526.147324] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4572kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1526.181124] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1526.186207] Node 0 DMA32 free:27168kB min:36272kB low:45340kB high:54408kB active_anon:1853172kB inactive_anon:780kB active_file:60kB inactive_file:72kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19680kB pagetables:52444kB bounce:0kB free_pcp:220kB local_pcp:120kB free_cma:0kB
[ 1526.221267] lowmem_reserve[]: 0 0 0 0 0
[ 1526.225303] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1526.260514] lowmem_reserve[]: 0 0 0 0 0
[ 1526.265157] Node 1 Normal free:54808kB min:53612kB low:67012kB high:80412kB active_anon:3461252kB inactive_anon:20kB active_file:460kB inactive_file:696kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21696kB pagetables:71088kB bounce:0kB free_pcp:1396kB local_pcp:724kB free_cma:0kB
[ 1526.301140] lowmem_reserve[]: 0 0 0 0 0
[ 1526.305802] Node 0 DMA: 11*4kB (UM) 11*8kB (UE) 3*16kB (UE) 9*32kB (UME) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10388kB
[ 1526.332987] Node 0 DMA32: 284*4kB (UME) 37*8kB (UME) 243*16kB (UME) 10*32kB (UM) 305*64kB (UME) 16*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27208kB
[ 1526.359217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1526.370997] Node 1 Normal: 70*4kB (UME) 209*8kB (UME) 843*16kB (UME) 590*32kB (UME) 167*64kB (UME) 32*128kB (UE) 10*256kB (UM) 3*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 55248kB
[ 1526.387931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1526.397094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1526.406680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1526.415961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1526.424710] 1040 total pagecache pages
[ 1526.428642] 0 pages in swap cache
[ 1526.432355] Swap cache stats: add 0, delete 0, find 0/0
[ 1526.437727] Free swap  = 0kB
[ 1526.440891] Total swap = 0kB
[ 1526.443919] 1965979 pages RAM
[ 1526.447135] 0 pages HighMem/MovableOnly
[ 1526.454206] 339049 pages reserved
[ 1526.457669] 0 pages cma reserved
[ 1526.464286] Out of memory: Kill process 2993 (syz-executor.1) score 1007 or sacrifice child
[ 1526.476141] Killed process 2993 (syz-executor.1) total-vm:75360kB, anon-rss:16576kB, file-rss:34816kB, shmem-rss:0kB
18:28:58 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)

18:28:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:28:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:28:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x0, 0x9, 0x0, 0x0, 0x8}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000001540)=@ax25={{0x3, @null}, [@default, @netrom, @bcast, @null, @netrom, @netrom, @remote, @rose]}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/103, 0x67}, {&(0x7f0000001640)=""/83, 0x53}, {&(0x7f0000004d80)=""/69, 0x45}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000001740)=""/191, 0xbf}, {&(0x7f0000004e00)=""/70, 0x46}, {&(0x7f0000001880)=""/41, 0x29}, {&(0x7f00000018c0)=""/204, 0xcc}], 0x9, &(0x7f0000001a80)=""/155, 0x9b}, 0x6}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001b40)=""/195, 0xc3}, {&(0x7f0000001c40)=""/96, 0x60}, {&(0x7f0000001cc0)=""/223, 0xdf}, {&(0x7f0000001dc0)=""/61, 0x3d}, {&(0x7f0000001e00)=""/80, 0x50}, {&(0x7f0000001e80)=""/214, 0xd6}], 0x6, &(0x7f0000001800)=""/88, 0x58}, 0x35}, {{&(0x7f0000002080)=@alg, 0x80, &(0x7f0000003440)=[{&(0x7f0000002100)=""/181, 0xb5}, {&(0x7f00000021c0)=""/22, 0x16}, {&(0x7f0000002200)=""/188, 0xbc}, {&(0x7f00000022c0)=""/82, 0x52}, {&(0x7f0000003380)=""/150, 0x96}], 0x5}, 0x5}, {{&(0x7f00000034c0)=@nfc, 0x80, &(0x7f0000004680)=[{&(0x7f0000003540)=""/15, 0xf}, {&(0x7f0000003580)=""/92, 0x5c}, {&(0x7f0000003600)=""/105, 0x69}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x4}, 0x7}, {{&(0x7f00000046c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004740)=""/141, 0x8d}, {&(0x7f0000004800)=""/122, 0x7a}, {&(0x7f0000004880)=""/161, 0xa1}, {&(0x7f0000004940)=""/228, 0xe4}, {&(0x7f0000004a40)=""/237, 0xed}], 0x5, &(0x7f0000004bc0)=""/99, 0x63}, 0x3ba4}], 0x5, 0x40003043, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000001480)=[@window={0x3, 0x0, 0x4f71}, @sack_perm, @sack_perm], 0x3)
pipe(&(0x7f00000012c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
pipe(&(0x7f00000016c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001300))
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
ioperm(0x20, 0x4, 0x8)
fcntl$setpipe(r3, 0x407, 0x4)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r4, &(0x7f0000000340), 0xfffffdf6)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x4b, 0x40000000, 0x3, 0x0, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000011c0)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000001340)=0xe8)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001380)={{{@in=@rand_addr=0xffff, @in6=@dev={0xfe, 0x80, [], 0x36}, 0x4e20, 0xfffd, 0x4e22, 0xc43, 0x2, 0x90, 0x60, 0x37, r9, r10}, {0x100000000, 0xc69, 0x6, 0x3, 0xb9d, 0x3, 0x2ecf50ec, 0x8}, {0x5e1, 0xe5fb, 0x7, 0x1}, 0x2, 0x6e6bbd, 0x2, 0x0, 0x6, 0x2}, {{@in6=@ipv4={[], [], @rand_addr=0x80000000}, 0x4d4, 0x32}, 0x2, @in6=@local, 0x0, 0x1, 0x0, 0x4, 0x2, 0x0, 0x6}}, 0xe8)
r11 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r11, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4)
r12 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r12, &(0x7f00000017c0), 0x0, 0x40000)

18:28:59 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:29:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:29:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f00000013c0)="756d3870fa9059c8d65b33b5331c15b39fe45a1c6407267a9ca28902f426bc78132765551157ea6f3fe790e9f57f584defd0388eb263e1c0bb40ae2b559bbf51d7ea78eba1b155bf12dddd557598f0b44c3b32cd2ab32d4db73a89143925f5fca603ded99dd18151d382a0a44cd39d4e22d9d4336e9377ce9f920efc1e27c804cad376b582b4b11040357bd7435dfe275a02ce55f9c36753554e", 0x9a)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

18:29:00 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200082, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0xff, 0x35315258, 0x7, 0x8, 0x3, @discrete={0x3}})

18:29:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0xba)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80800)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
socket$inet6(0xa, 0xa, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r4, &(0x7f00000017c0), 0x375, 0x0)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)

18:29:00 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000002000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x78}}, 0x0)

[ 1528.938940] syz-executor.0 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=0
[ 1529.056328] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1529.084147] CPU: 1 PID: 7522 Comm: syz-executor.0 Not tainted 4.14.172-syzkaller #0
[ 1529.092027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1529.101382] Call Trace:
[ 1529.103972]  dump_stack+0x13e/0x194
[ 1529.107602]  dump_header+0x178/0x6d4
[ 1529.111311]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1529.116327]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1529.121425]  ? ___ratelimit+0x50/0x519
[ 1529.125313]  oom_kill_process.cold+0x10/0xae3
[ 1529.129809]  ? lock_downgrade+0x6e0/0x6e0
[ 1529.133975]  out_of_memory+0x2d5/0x1110
[ 1529.137955]  ? oom_killer_disable+0x1c0/0x1c0
[ 1529.142446]  ? mutex_trylock+0x152/0x1a0
[ 1529.146505]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1529.151359]  ? warn_alloc+0xf0/0xf0
[ 1529.154998]  __alloc_pages_nodemask+0x5d3/0x700
[ 1529.159669]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1529.164674]  ? __kmalloc_node+0x38/0x70
[ 1529.168641]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1529.173664]  ? kasan_unpoison_shadow+0x30/0x40
[ 1529.178258]  alloc_pages_current+0xe7/0x1e0
[ 1529.182602]  __vmalloc_node_range+0x40b/0x6c0
[ 1529.187099]  vzalloc+0x42/0x50
[ 1529.190290]  ? alloc_counters.isra.0+0x42/0x80
[ 1529.194880]  alloc_counters.isra.0+0x42/0x80
[ 1529.199281]  do_ip6t_get_ctl+0x403/0x780
[ 1529.203357]  ? SOFTIRQ_verbose+0x10/0x10
[ 1529.207415]  ? alloc_counters.isra.0+0x80/0x80
[ 1529.211993]  ? __mutex_unlock_slowpath+0x75/0x780
[ 1529.216833]  ? find_held_lock+0x2d/0x110
[ 1529.220918]  ? wait_for_completion+0x390/0x390
[ 1529.225504]  ? nf_sockopt_find.constprop.0+0x1ad/0x220
[ 1529.230777]  nf_getsockopt+0x62/0xc0
[ 1529.234490]  ipv6_getsockopt+0x17b/0x1f0
[ 1529.238550]  ? do_ipv6_getsockopt.isra.0+0x2040/0x2040
[ 1529.243824]  ? sock_alloc_file+0x1ae/0x2e0
[ 1529.248051]  ? sock_poll+0x220/0x220
[ 1529.251779]  tcp_getsockopt+0x7b/0xc0
[ 1529.255578]  SyS_getsockopt+0x102/0x1c0
[ 1529.259549]  ? SyS_setsockopt+0x1e0/0x1e0
[ 1529.263696]  ? do_syscall_64+0x4c/0x640
[ 1529.267663]  ? SyS_setsockopt+0x1e0/0x1e0
[ 1529.271818]  do_syscall_64+0x1d5/0x640
[ 1529.275709]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1529.280891] RIP: 0033:0x45efba
[ 1529.284072] RSP: 002b:00007fff984130b8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[ 1529.291777] RAX: ffffffffffffffda RBX: 00007fff984130e0 RCX: 000000000045efba
[ 1529.299057] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003
[ 1529.306345] RBP: 000000000071dcc0 R08: 00007fff984130dc R09: 0000000000004000
[ 1529.313608] R10: 00007fff984131e0 R11: 0000000000000212 R12: 0000000000000003
[ 1529.320886] R13: 0000000000000000 R14: 0000000000000029 R15: 000000000071cf40
[ 1529.437549] Mem-Info:
[ 1529.447952] active_anon:1329845 inactive_anon:197 isolated_anon:0
[ 1529.447952]  active_file:342 inactive_file:325 isolated_file:67
[ 1529.447952]  unevictable:0 dirty:70 writeback:1 unstable:0
[ 1529.447952]  slab_reclaimable:16350 slab_unreclaimable:111262
[ 1529.447952]  mapped:52835 shmem:258 pagetables:30954 bounce:0
[ 1529.447952]  free:22869 free_pcp:11 free_cma:0
[ 1529.487565] Node 0 active_anon:1857040kB inactive_anon:780kB active_file:76kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208920kB dirty:12kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1529.546133] Node 1 active_anon:3462340kB inactive_anon:8kB active_file:832kB inactive_file:832kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1576kB dirty:208kB writeback:68kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1529.576802] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4572kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1529.678571] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1529.689635] Node 0 DMA32 free:27772kB min:36272kB low:45340kB high:54408kB active_anon:1852468kB inactive_anon:780kB active_file:180kB inactive_file:68kB unevictable:0kB writepending:12kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19776kB pagetables:52352kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1529.729348] lowmem_reserve[]: 0 0 0 0 0
[ 1529.734208] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1529.787202] lowmem_reserve[]: 0 0 0 0 0
[ 1529.791392] Node 1 Normal free:53800kB min:53612kB low:67012kB high:80412kB active_anon:3462340kB inactive_anon:8kB active_file:840kB inactive_file:1340kB unevictable:0kB writepending:276kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21888kB pagetables:71464kB bounce:0kB free_pcp:1348kB local_pcp:636kB free_cma:0kB
[ 1529.821440] lowmem_reserve[]: 0 0 0 0 0
[ 1529.825551] Node 0 DMA: 11*4kB (UM) 10*8kB (UE) 3*16kB (UE) 9*32kB (UME) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB
[ 1529.844569] Node 0 DMA32: 282*4kB (UME) 204*8kB (UME) 239*16kB (UME) 11*32kB (UM) 295*64kB (ME) 16*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27864kB
[ 1529.859536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1529.870511] Node 1 Normal: 462*4kB (UME) 452*8kB (UMEH) 991*16kB (UMEH) 597*32kB (UMEH) 161*64kB (UMEH) 25*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54696kB
[ 1529.887360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1529.908464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1529.917982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1529.927956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1529.937302] 461 total pagecache pages
[ 1529.941770] 0 pages in swap cache
[ 1529.945859] Swap cache stats: add 0, delete 0, find 0/0
[ 1529.951968] Free swap  = 0kB
[ 1529.955754] Total swap = 0kB
[ 1529.959557] 1965979 pages RAM
[ 1529.970372] 0 pages HighMem/MovableOnly
[ 1529.991183] 339049 pages reserved
[ 1529.994841] 0 pages cma reserved
[ 1529.998311] Out of memory: Kill process 17002 (syz-executor.5) score 1007 or sacrifice child
[ 1530.080716] cron invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1530.103281] cron cpuset=/ mems_allowed=0-1
[ 1530.116914] CPU: 0 PID: 7403 Comm: cron Not tainted 4.14.172-syzkaller #0
[ 1530.123877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1530.133232] Call Trace:
[ 1530.135831]  dump_stack+0x13e/0x194
[ 1530.139478]  dump_header+0x178/0x6d4
[ 1530.143205]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1530.148231]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1530.153337]  ? ___ratelimit+0x50/0x519
[ 1530.157346]  oom_kill_process.cold+0x10/0xae3
[ 1530.161851]  ? lock_downgrade+0x6e0/0x6e0
[ 1530.166012]  out_of_memory+0x2d5/0x1110
[ 1530.169997]  ? oom_killer_disable+0x1c0/0x1c0
[ 1530.174496]  ? mutex_trylock+0x152/0x1a0
[ 1530.178567]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1530.183443]  ? warn_alloc+0xf0/0xf0
[ 1530.187075]  ? find_held_lock+0x2d/0x110
[ 1530.191140]  ? fs_reclaim_acquire+0x10/0x10
[ 1530.195459]  __alloc_pages_nodemask+0x5d3/0x700
[ 1530.200141]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1530.205140]  ? find_held_lock+0x2d/0x110
[ 1530.209189]  ? cache_grow_begin+0x32d/0x410
[ 1530.213495]  cache_grow_begin+0x7b/0x410
[ 1530.217536]  ? __cpuset_node_allowed+0xfa/0x450
[ 1530.222202]  fallback_alloc+0x205/0x2b0
[ 1530.226171]  kmem_cache_alloc+0x1ea/0x770
[ 1530.230307]  getname_flags+0xc8/0x560
[ 1530.234102]  user_path_at_empty+0x2a/0x50
[ 1530.238291]  vfs_statx+0xd1/0x160
[ 1530.241746]  ? vfs_statx_fd+0x90/0x90
[ 1530.245569]  SYSC_newstat+0x83/0xe0
[ 1530.249182]  ? cp_new_stat+0x580/0x580
[ 1530.253059]  ? lock_downgrade+0x6e0/0x6e0
[ 1530.257212]  ? up_read+0x17/0x30
[ 1530.260563]  ? __do_page_fault+0x35b/0xb40
[ 1530.264800]  ? do_syscall_64+0x4c/0x640
[ 1530.268761]  ? SyS_fstat+0x20/0x20
[ 1530.272286]  do_syscall_64+0x1d5/0x640
[ 1530.276162]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1530.281346] RIP: 0033:0x7f464d0e1c65
[ 1530.285091] RSP: 002b:00007ffe1b02c728 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1530.292789] RAX: ffffffffffffffda RBX: 00007f464d15faa4 RCX: 00007f464d0e1c65
[ 1530.300050] RDX: 00007ffe1b02c770 RSI: 00007ffe1b02c770 RDI: 00007f464d15faa4
[ 1530.307319] RBP: 00007ffe1b02c870 R08: 0000000001ef8710 R09: 0000000000000000
[ 1530.314608] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 1530.322115] R13: 0000000000000001 R14: 000000000000002f R15: 0000000000000000
[ 1530.332640] Mem-Info:
[ 1530.335813] active_anon:1329845 inactive_anon:197 isolated_anon:0
[ 1530.335813]  active_file:65 inactive_file:110 isolated_file:0
[ 1530.335813]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1530.335813]  slab_reclaimable:16352 slab_unreclaimable:111282
[ 1530.335813]  mapped:52261 shmem:258 pagetables:30954 bounce:0
[ 1530.335813]  free:23534 free_pcp:83 free_cma:0
[ 1530.370919] Node 0 active_anon:1857040kB inactive_anon:780kB active_file:68kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208916kB dirty:0kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1530.429697] Node 1 active_anon:3462340kB inactive_anon:8kB active_file:640kB inactive_file:1208kB unevictable:0kB isolated(anon):0kB isolated(file):364kB mapped:1228kB dirty:0kB writeback:0kB shmem:20kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1530.491885] Node 0 DMA free:10380kB min:220kB low:272kB high:324kB active_anon:4572kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:160kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1530.519557] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1530.525524] Node 0 DMA32 free:27696kB min:36272kB low:45340kB high:54408kB active_anon:1852468kB inactive_anon:780kB active_file:68kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2621272kB mlocked:0kB kernel_stack:19744kB pagetables:52352kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB
[ 1530.563779] lowmem_reserve[]: 0 0 0 0 0
[ 1530.572641] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1530.626399] lowmem_reserve[]: 0 0 0 0 0
[ 1530.635075] Node 1 Normal free:55048kB min:53612kB low:67012kB high:80412kB active_anon:3462340kB inactive_anon:8kB active_file:1004kB inactive_file:464kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:21856kB pagetables:71464kB bounce:0kB free_pcp:300kB local_pcp:56kB free_cma:0kB
[ 1530.665084] lowmem_reserve[]: 0 0 0 0 0
[ 1530.669198] Node 0 DMA: 11*4kB (UM) 10*8kB (UE) 3*16kB (UE) 9*32kB (UME) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10380kB
[ 1530.699023] Node 0 DMA32: 278*4kB (UME) 202*8kB (UME) 239*16kB (UME) 11*32kB (UM) 295*64kB (ME) 16*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27832kB
[ 1530.717911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1530.730481] Node 1 Normal: 283*4kB (UME) 429*8kB (UMEH) 1032*16kB (UMEH) 606*32kB (UMEH) 167*64kB (UMEH) 26*128kB (UME) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55252kB
[ 1530.750799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1530.759825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1530.768558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1530.777627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1530.786434] 555 total pagecache pages
[ 1530.790424] 0 pages in swap cache
[ 1530.793971] Swap cache stats: add 0, delete 0, find 0/0
[ 1530.799415] Free swap  = 0kB
[ 1530.802805] Total swap = 0kB
[ 1530.805912] 1965979 pages RAM
[ 1530.809098] 0 pages HighMem/MovableOnly
[ 1530.813230] 339049 pages reserved
[ 1530.816879] 0 pages cma reserved
[ 1530.820385] Out of memory: Kill process 17017 (syz-executor.5) score 1007 or sacrifice child
[ 1530.829108] Killed process 17017 (syz-executor.5) total-vm:75228kB, anon-rss:16572kB, file-rss:34816kB, shmem-rss:0kB
[ 1530.908342] oom_reaper: reaped process 17017 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
18:29:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:29:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x21, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x2)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

[ 1531.306019] selinux_nlmsg_perm: 6 callbacks suppressed
[ 1531.306029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17010 comm=syz-executor.4
18:29:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x1000000c, 0x8000, 0x20000009}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
r3 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r5, r6, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="3d06af9c19fa295b12047dbabe511770e647261e47e71e7d316628d993a1fa91ec3aa5d4caccc6e4c481103fdf9b1373ce5f67b10a5af7ca0dfdcb665b91d1c12662650d3f257d2e6313c68a70c5f0115b66b6e63690bce56e44cb31810071a2d1f640fb3bf874771aa9d1d5abf732e0dac33f410bf8d0e97967947c7e1d8b3cc0c361378d55b5b705a319bc5663ab2847851c9cdd0e1d647f53a2aaa3de0a23ec4d3a000000000026aa39bd8b8562aded6b517dee900365abdda6c8fe6e7046635c5325fc74dc2acd27e9547159a91a19bacc3b03c6caddedbd2f07df882675477354f15d88e51e87d55306b5b5ee72bf50f7e6846b64cfbd576b7989fb673f5d762c944e9718a3f3555f9d2f251a", 0x10f}], 0x1, 0x0)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r7, &(0x7f00000017c0), 0x375, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r8, 0x0, 0x8000)

18:29:05 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x2001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x0, 0x7f, 0x667b})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8864}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}, @address_reply}}, 0x2a)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)={0x20, r4, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x78, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3dc3745d}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, "3e7598e604b806b8d5b5e4e8a040cb73"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb27f}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, "488565"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x20}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xac}}, 0x20000000)

18:29:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:29:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:29:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

18:29:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r2, &(0x7f0000000340), 0xfffffdf6)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x2)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r3 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r3, &(0x7f00000017c0), 0x1a2, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r6, r7, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00')
preadv(r8, &(0x7f00000017c0), 0x375, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
open_by_handle_at(r9, 0x0, 0x8000)

18:29:06 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
r1 = socket$netlink(0x10, 0x3, 0x0)
ptrace$cont(0x9, 0xffffffffffffffff, 0x5, 0x7fff)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'veth0_to_team\x00', {0x7, 0x0, @multicast2}})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x441, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
socket$inet6_sctp(0xa, 0x5, 0x84)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000886400000000000000000000000000000000000000019078ac141400e000000112009078fffffffddb3b0b2b2b173c5167efc8429a968d1f96b01ab2e432debc24a8bfeaee267856cba166192ae39c72794f9e15248edd6095b5520cd6690ef9dcfc22941e9af72653aa515847acb02250c957e642f72572703e37107a9114b6e2628c73dc570aa3aadc0cb14b1bab42b47d6a5f5a51998962e9a070e5086e14000000000000000000000000ddd29dd13e22f1746b89b8c14c8292aabaa74f57abad96b007335a5f64ff28720beb8e9693d4159020351ecd50d10bebb9337c47f85744e898911c8b2ebaff6090f527a19f29ad70beeefa50784087b4e406146df7a7160457878dfab944e118313757e0ca2b80fd5b8c6597cb286d4fad832bb657a4c66df5678733b5ccd4797af8c87fbe1261d3351610d0153cc59ebf33730798f220000000da886b0171c550583720620a23f8e4e14e"], 0x2a)

[ 1534.601137] device bridge_slave_0 left promiscuous mode
[ 1534.607082] bridge1: port 1(bridge_slave_0) entered disabled state
[ 1534.684418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1534.709428] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1534.758494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1534.784622] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1534.816042] device bridge_slave_1 left promiscuous mode
[ 1534.835262] bridge0: port 2(bridge_slave_1) entered disabled state
18:29:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)

[ 1534.900206] device veth1_macvtap left promiscuous mode
[ 1534.916928] device veth0_macvtap left promiscuous mode
[ 1534.935698] device veth1_vlan left promiscuous mode
[ 1534.957838] device veth0_vlan left promiscuous mode
[ 1535.472498] device hsr_slave_1 left promiscuous mode
[ 1535.514758] device hsr_slave_0 left promiscuous mode
[ 1535.583839] team0 (unregistering): Port device team_slave_1 removed
[ 1535.611111] team0 (unregistering): Port device team_slave_0 removed
[ 1535.638911] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1535.719471] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1535.858809] bond0 (unregistering): Released all slaves
[ 1537.420728] audit: type=1400 audit(1583864949.654:12347): avc:  denied  { map } for  pid=17099 comm="syz-executor.2" path="/root/syz-executor.2" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 1537.474340] audit: type=1400 audit(1583864949.684:12348): avc:  denied  { map } for  pid=17099 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=74 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[ 1538.581165] IPVS: ftp: loaded support on port[0] = 21
[ 1539.445423] chnl_net:caif_netlink_parms(): no params data found
[ 1539.525855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1539.532590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1539.539595] device bridge_slave_0 entered promiscuous mode
[ 1539.546997] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1539.553646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1539.561562] device bridge_slave_1 entered promiscuous mode
[ 1539.581667] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1539.598100] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1539.616671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1539.624373] team0: Port device team_slave_0 added
[ 1539.630136] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1539.637553] team0: Port device team_slave_1 added
[ 1539.661247] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1539.667509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1539.693013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1539.704981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1539.711437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1539.737000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1539.748418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1539.759335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1539.812816] device hsr_slave_0 entered promiscuous mode
[ 1539.850389] device hsr_slave_1 entered promiscuous mode
[ 1539.904986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1539.912653] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1540.006477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1540.013143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1540.019808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1540.026246] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1540.075538] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1540.081883] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1540.096767] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1540.105881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1540.113354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1540.131094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1540.146017] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1540.152287] 8021q: adding VLAN 0 to HW filter on device team0
[ 1540.162382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1540.170247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1540.176605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1540.193135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1540.202897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1540.209492] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1540.220312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1540.228263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1540.239287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1540.246054] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1540.255312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1540.262489] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1540.271135] device bridge_slave_1 left promiscuous mode
[ 1540.276808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1540.320900] device bridge_slave_0 left promiscuous mode
[ 1540.326457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1540.372488] device veth1_macvtap left promiscuous mode
[ 1540.377838] device veth0_macvtap left promiscuous mode
[ 1540.383624] device veth1_vlan left promiscuous mode
[ 1540.388873] device veth0_vlan left promiscuous mode
[ 1540.633848] device hsr_slave_1 left promiscuous mode
[ 1540.672837] device hsr_slave_0 left promiscuous mode
[ 1540.730806] team0 (unregistering): Port device team_slave_1 removed
[ 1540.740126] team0 (unregistering): Port device team_slave_0 removed
[ 1540.749055] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1540.797125] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1540.853947] bond0 (unregistering): Released all slaves
[ 1540.906765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1540.917057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1540.927430] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1540.934105] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1540.943770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1540.951582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1540.959444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1540.968222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1540.989937] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 1540.997961] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1541.004469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1541.012237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1541.025365] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1541.114053] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 1541.125630] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 1541.133694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1541.142891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1541.183819] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 1541.192088] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 1541.198709] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 1541.208368] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 1541.215044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1541.222809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1541.230891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1541.237910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1541.246828] device veth0_vlan entered promiscuous mode
[ 1541.258788] device veth1_vlan entered promiscuous mode
[ 1541.264811] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 1541.275290] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 1541.287779] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 1541.297245] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 1541.304901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1541.314635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1541.322348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1541.329867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1541.339622] device veth0_macvtap entered promiscuous mode
[ 1541.345850] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 1541.355759] device veth1_macvtap entered promiscuous mode
[ 1541.361975] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 1541.371348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 1541.382728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 1541.392213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1541.401979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.411489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1541.421306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.430899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1541.440892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.449995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1541.459765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.469889] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 1541.477123] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1541.486166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1541.493597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1541.500884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1541.508492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1541.518479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1541.528833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.538006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1541.547775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.556926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1541.566984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.576776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1541.586677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.596778] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 1541.603709] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1541.611813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1541.619769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
18:29:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0)
write(r3, &(0x7f0000000340), 0xfffffdf6)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
mincore(&(0x7f0000fec000/0x14000)=nil, 0x14000, &(0x7f00000011c0)=""/249)
r4 = syz_open_procfs(0x0, &(0x7f0000001380)='mounts\x00')
preadv(r4, &(0x7f00000017c0), 0x1a2, 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4ef)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$setpipe(r8, 0x407, 0x0)
write(r8, &(0x7f0000000340), 0x41395527)
r9 = socket$inet(0x2, 0x4000000805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
r11 = dup3(r9, r10, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
pipe(&(0x7f0000000140))
sendto$inet(r7, &(0x7f0000000180)="7cec6647b1cc638e09", 0x9, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r10, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x6, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000013c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x42}, 0xfffffffb}}, 0x3, 0x5}, 0x90)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4040}, 0x20004041)
r12 = getpid()
r13 = syz_open_procfs(r12, &(0x7f0000000140)='limits\x00')
preadv(r13, &(0x7f00000017c0), 0x375, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
open_by_handle_at(r14, 0x0, 0x8000)