Warning: Permanently added '[localhost]:34663' (ECDSA) to the list of known hosts.
2021/08/03 18:25:25 fuzzer started
2021/08/03 18:25:26 dialing manager at localhost:40381
2021/08/03 18:25:29 syscalls: 3634
2021/08/03 18:25:29 code coverage: enabled
2021/08/03 18:25:29 comparison tracing: enabled
2021/08/03 18:25:29 extra coverage: enabled
2021/08/03 18:25:29 setuid sandbox: enabled
2021/08/03 18:25:29 namespace sandbox: enabled
2021/08/03 18:25:29 Android sandbox: enabled
2021/08/03 18:25:29 fault injection: enabled
2021/08/03 18:25:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/08/03 18:25:29 net packet injection: enabled
2021/08/03 18:25:29 net device setup: enabled
2021/08/03 18:25:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/08/03 18:25:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/08/03 18:25:29 USB emulation: enabled
2021/08/03 18:25:29 hci packet injection: enabled
2021/08/03 18:25:29 wifi device emulation: enabled
2021/08/03 18:25:29 802.15.4 emulation: enabled
2021/08/03 18:25:29 fetching corpus: 0, signal 0/2000 (executing program)
2021/08/03 18:25:30 fetching corpus: 50, signal 55959/59493 (executing program)
2021/08/03 18:25:30 fetching corpus: 100, signal 73846/78955 (executing program)
2021/08/03 18:25:30 fetching corpus: 150, signal 97489/103942 (executing program)
syzkaller login: [   97.548029][ T3400] ieee802154 phy0 wpan0: encryption failed: -22
[   97.555255][ T3400] ieee802154 phy1 wpan1: encryption failed: -22
2021/08/03 18:25:30 fetching corpus: 200, signal 112282/120060 (executing program)
2021/08/03 18:25:31 fetching corpus: 250, signal 124142/133172 (executing program)
2021/08/03 18:25:31 fetching corpus: 300, signal 137775/147894 (executing program)
2021/08/03 18:25:31 fetching corpus: 350, signal 152887/163920 (executing program)
2021/08/03 18:25:31 fetching corpus: 400, signal 159918/172063 (executing program)
2021/08/03 18:25:32 fetching corpus: 450, signal 167195/180457 (executing program)
2021/08/03 18:25:32 fetching corpus: 500, signal 173230/187563 (executing program)
2021/08/03 18:25:32 fetching corpus: 550, signal 180866/196099 (executing program)
2021/08/03 18:25:33 fetching corpus: 600, signal 186504/202714 (executing program)
2021/08/03 18:25:33 fetching corpus: 650, signal 191713/208933 (executing program)
2021/08/03 18:25:33 fetching corpus: 700, signal 197152/215275 (executing program)
2021/08/03 18:25:33 fetching corpus: 750, signal 207340/225933 (executing program)
2021/08/03 18:25:34 fetching corpus: 800, signal 214980/234125 (executing program)
2021/08/03 18:25:34 fetching corpus: 850, signal 221398/241198 (executing program)
2021/08/03 18:25:34 fetching corpus: 900, signal 227705/248155 (executing program)
2021/08/03 18:25:34 fetching corpus: 950, signal 232944/254019 (executing program)
2021/08/03 18:25:35 fetching corpus: 1000, signal 238878/260513 (executing program)
2021/08/03 18:25:35 fetching corpus: 1050, signal 245002/267107 (executing program)
2021/08/03 18:25:35 fetching corpus: 1100, signal 247586/270478 (executing program)
2021/08/03 18:25:35 fetching corpus: 1150, signal 251238/274762 (executing program)
2021/08/03 18:25:36 fetching corpus: 1200, signal 256036/280064 (executing program)
2021/08/03 18:25:36 fetching corpus: 1250, signal 258802/283520 (executing program)
2021/08/03 18:25:36 fetching corpus: 1300, signal 263824/288941 (executing program)
2021/08/03 18:25:36 fetching corpus: 1350, signal 267722/293323 (executing program)
2021/08/03 18:25:37 fetching corpus: 1400, signal 271079/297231 (executing program)
2021/08/03 18:25:37 fetching corpus: 1450, signal 275471/301974 (executing program)
2021/08/03 18:25:37 fetching corpus: 1499, signal 279045/306034 (executing program)
2021/08/03 18:25:37 fetching corpus: 1549, signal 282144/309615 (executing program)
2021/08/03 18:25:37 fetching corpus: 1599, signal 285824/313646 (executing program)
2021/08/03 18:25:38 fetching corpus: 1649, signal 288943/317151 (executing program)
2021/08/03 18:25:38 fetching corpus: 1699, signal 293352/321719 (executing program)
2021/08/03 18:25:38 fetching corpus: 1749, signal 297037/325722 (executing program)
2021/08/03 18:25:38 fetching corpus: 1799, signal 299446/328588 (executing program)
2021/08/03 18:25:39 fetching corpus: 1849, signal 301747/331320 (executing program)
2021/08/03 18:25:39 fetching corpus: 1899, signal 305559/335348 (executing program)
2021/08/03 18:25:40 fetching corpus: 1949, signal 308755/338788 (executing program)
2021/08/03 18:25:40 fetching corpus: 1999, signal 311698/341969 (executing program)
2021/08/03 18:25:40 fetching corpus: 2049, signal 315277/345682 (executing program)
2021/08/03 18:25:40 fetching corpus: 2099, signal 317896/348576 (executing program)
2021/08/03 18:25:41 fetching corpus: 2149, signal 322728/353252 (executing program)
2021/08/03 18:25:41 fetching corpus: 2199, signal 324593/355482 (executing program)
2021/08/03 18:25:41 fetching corpus: 2249, signal 328031/358952 (executing program)
2021/08/03 18:25:41 fetching corpus: 2299, signal 330923/361914 (executing program)
2021/08/03 18:25:41 fetching corpus: 2349, signal 333323/364484 (executing program)
2021/08/03 18:25:42 fetching corpus: 2399, signal 336923/368025 (executing program)
2021/08/03 18:25:42 fetching corpus: 2449, signal 338722/370108 (executing program)
2021/08/03 18:25:42 fetching corpus: 2499, signal 341957/373329 (executing program)
2021/08/03 18:25:42 fetching corpus: 2549, signal 343997/375535 (executing program)
2021/08/03 18:25:43 fetching corpus: 2599, signal 348676/379791 (executing program)
2021/08/03 18:25:43 fetching corpus: 2649, signal 350288/381600 (executing program)
2021/08/03 18:25:43 fetching corpus: 2699, signal 352303/383750 (executing program)
2021/08/03 18:25:44 fetching corpus: 2749, signal 355178/386472 (executing program)
2021/08/03 18:25:44 fetching corpus: 2799, signal 356379/387939 (executing program)
2021/08/03 18:25:44 fetching corpus: 2849, signal 358417/390042 (executing program)
2021/08/03 18:25:44 fetching corpus: 2899, signal 360900/392475 (executing program)
2021/08/03 18:25:44 fetching corpus: 2949, signal 364646/395837 (executing program)
2021/08/03 18:25:45 fetching corpus: 2999, signal 367848/398743 (executing program)
2021/08/03 18:25:45 fetching corpus: 3049, signal 372081/402458 (executing program)
2021/08/03 18:25:45 fetching corpus: 3099, signal 376010/405907 (executing program)
2021/08/03 18:25:45 fetching corpus: 3149, signal 377693/407585 (executing program)
2021/08/03 18:25:46 fetching corpus: 3199, signal 379172/409169 (executing program)
2021/08/03 18:25:46 fetching corpus: 3249, signal 381765/411506 (executing program)
2021/08/03 18:25:47 fetching corpus: 3299, signal 383216/413009 (executing program)
2021/08/03 18:25:47 fetching corpus: 3349, signal 388750/417435 (executing program)
2021/08/03 18:25:47 fetching corpus: 3399, signal 390800/419328 (executing program)
2021/08/03 18:25:47 fetching corpus: 3449, signal 393294/421597 (executing program)
2021/08/03 18:25:47 fetching corpus: 3499, signal 395954/423908 (executing program)
2021/08/03 18:25:48 fetching corpus: 3549, signal 397591/425434 (executing program)
2021/08/03 18:25:48 fetching corpus: 3599, signal 399349/427054 (executing program)
2021/08/03 18:25:48 fetching corpus: 3649, signal 402172/429400 (executing program)
2021/08/03 18:25:48 fetching corpus: 3699, signal 404553/431409 (executing program)
2021/08/03 18:25:49 fetching corpus: 3749, signal 406078/432839 (executing program)
2021/08/03 18:25:49 fetching corpus: 3799, signal 407357/434037 (executing program)
2021/08/03 18:25:49 fetching corpus: 3849, signal 408673/435285 (executing program)
2021/08/03 18:25:49 fetching corpus: 3899, signal 410548/436929 (executing program)
2021/08/03 18:25:49 fetching corpus: 3949, signal 413154/439002 (executing program)
2021/08/03 18:25:50 fetching corpus: 3999, signal 414843/440391 (executing program)
2021/08/03 18:25:50 fetching corpus: 4049, signal 416316/441669 (executing program)
2021/08/03 18:25:50 fetching corpus: 4099, signal 417776/442953 (executing program)
2021/08/03 18:25:50 fetching corpus: 4149, signal 419403/444320 (executing program)
2021/08/03 18:25:51 fetching corpus: 4199, signal 420545/445382 (executing program)
2021/08/03 18:25:51 fetching corpus: 4249, signal 422534/446945 (executing program)
2021/08/03 18:25:51 fetching corpus: 4299, signal 423926/448139 (executing program)
2021/08/03 18:25:51 fetching corpus: 4349, signal 425698/449569 (executing program)
2021/08/03 18:25:52 fetching corpus: 4399, signal 427403/450879 (executing program)
2021/08/03 18:25:52 fetching corpus: 4449, signal 430061/452823 (executing program)
2021/08/03 18:25:52 fetching corpus: 4499, signal 431008/453677 (executing program)
2021/08/03 18:25:52 fetching corpus: 4549, signal 432411/454813 (executing program)
2021/08/03 18:25:53 fetching corpus: 4599, signal 434097/456085 (executing program)
2021/08/03 18:25:53 fetching corpus: 4649, signal 435662/457274 (executing program)
2021/08/03 18:25:53 fetching corpus: 4699, signal 437130/458423 (executing program)
2021/08/03 18:25:53 fetching corpus: 4749, signal 438225/459286 (executing program)
2021/08/03 18:25:53 fetching corpus: 4799, signal 440287/460772 (executing program)
2021/08/03 18:25:54 fetching corpus: 4849, signal 442117/462070 (executing program)
2021/08/03 18:25:54 fetching corpus: 4899, signal 443053/462814 (executing program)
2021/08/03 18:25:54 fetching corpus: 4949, signal 444782/464024 (executing program)
2021/08/03 18:25:54 fetching corpus: 4999, signal 447136/465628 (executing program)
2021/08/03 18:25:55 fetching corpus: 5049, signal 448925/466867 (executing program)
2021/08/03 18:25:55 fetching corpus: 5099, signal 450263/467843 (executing program)
2021/08/03 18:25:55 fetching corpus: 5149, signal 453513/469915 (executing program)
2021/08/03 18:25:55 fetching corpus: 5199, signal 455147/471010 (executing program)
2021/08/03 18:25:56 fetching corpus: 5249, signal 457456/472494 (executing program)
2021/08/03 18:25:56 fetching corpus: 5299, signal 458962/473503 (executing program)
2021/08/03 18:25:56 fetching corpus: 5349, signal 460202/474356 (executing program)
2021/08/03 18:25:56 fetching corpus: 5399, signal 461621/475274 (executing program)
2021/08/03 18:25:56 fetching corpus: 5449, signal 463188/476252 (executing program)
2021/08/03 18:25:57 fetching corpus: 5499, signal 465077/477458 (executing program)
2021/08/03 18:25:57 fetching corpus: 5549, signal 466407/478300 (executing program)
2021/08/03 18:25:58 fetching corpus: 5599, signal 467717/479123 (executing program)
2021/08/03 18:25:58 fetching corpus: 5649, signal 468718/479751 (executing program)
2021/08/03 18:25:58 fetching corpus: 5699, signal 470400/480697 (executing program)
2021/08/03 18:25:58 fetching corpus: 5749, signal 471629/481426 (executing program)
2021/08/03 18:25:58 fetching corpus: 5799, signal 472663/482055 (executing program)
2021/08/03 18:25:58 fetching corpus: 5849, signal 475730/483720 (executing program)
2021/08/03 18:25:59 fetching corpus: 5899, signal 477436/484672 (executing program)
2021/08/03 18:25:59 fetching corpus: 5949, signal 480009/486058 (executing program)
2021/08/03 18:25:59 fetching corpus: 5999, signal 481370/486793 (executing program)
2021/08/03 18:25:59 fetching corpus: 6049, signal 482897/487602 (executing program)
2021/08/03 18:25:59 fetching corpus: 6099, signal 483919/488150 (executing program)
2021/08/03 18:26:00 fetching corpus: 6149, signal 485199/488796 (executing program)
2021/08/03 18:26:00 fetching corpus: 6199, signal 486657/489558 (executing program)
2021/08/03 18:26:00 fetching corpus: 6249, signal 488182/490299 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490333 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490350 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490365 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490387 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490403 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490414 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490427 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490446 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490471 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490487 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490500 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490523 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490536 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490550 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490566 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490583 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490603 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490618 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490633 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490649 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490665 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490674 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490689 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490708 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490718 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490736 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490754 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490764 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490783 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490805 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490819 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490836 (executing program)
2021/08/03 18:26:00 fetching corpus: 6256, signal 488218/490857 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490880 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490891 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490906 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490918 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490943 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490953 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490968 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490976 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/490992 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491016 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491029 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491043 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491062 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491079 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491099 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491117 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491137 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491155 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491175 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491195 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491214 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491236 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491252 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491265 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491283 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491298 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491313 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491328 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491346 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491361 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491374 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491395 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491403 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491414 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491433 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491450 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491473 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491487 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491500 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491520 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491531 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491546 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491560 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491576 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491593 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491608 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491620 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491635 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491654 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491665 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491680 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491701 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491717 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491739 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491755 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491763 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491778 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491802 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491819 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491837 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491845 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491859 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491877 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491887 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491901 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491918 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491926 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491942 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491962 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491980 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/491996 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492015 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492031 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492053 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492067 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492094 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492108 (executing program)
2021/08/03 18:26:01 fetching corpus: 6256, signal 488218/492126 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492141 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492162 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492189 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492208 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492228 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492242 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492262 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492279 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492297 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492297 (executing program)
2021/08/03 18:26:02 fetching corpus: 6256, signal 488218/492297 (executing program)
2021/08/03 18:26:05 starting 4 fuzzer processes
18:26:05 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  132.914670][   T51] audit: type=1400 audit(1628015166.006:8): avc:  denied  { execmem } for  pid=8684 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:26:06 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x8}]}, 0x18}}, 0x0)

18:26:06 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x29, 0x4b, 0x0, 0x300)

18:26:06 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

[  134.344761][ T8685] chnl_net:caif_netlink_parms(): no params data found
[  134.423106][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.434239][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.445385][ T8685] device bridge_slave_0 entered promiscuous mode
[  134.458923][ T8685] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.468054][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.477399][ T8685] device bridge_slave_1 entered promiscuous mode
[  134.501210][ T8685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.515205][ T8685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.540654][ T8685] team0: Port device team_slave_0 added
[  134.550458][ T8685] team0: Port device team_slave_1 added
[  134.597310][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.605490][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.635173][ T8685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.667344][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.676286][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.706976][ T8685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.765545][ T8685] device hsr_slave_0 entered promiscuous mode
[  134.785136][ T8685] device hsr_slave_1 entered promiscuous mode
[  135.012793][ T8687] chnl_net:caif_netlink_parms(): no params data found
[  135.175067][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.185726][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.203024][ T8687] device bridge_slave_0 entered promiscuous mode
[  135.243815][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.252908][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.268345][ T8687] device bridge_slave_1 entered promiscuous mode
[  135.296932][ T8689] chnl_net:caif_netlink_parms(): no params data found
[  135.325171][ T8687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.349202][ T8687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.390567][ T8687] team0: Port device team_slave_0 added
[  135.435798][ T8687] team0: Port device team_slave_1 added
[  135.513078][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.523967][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.561150][ T8687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.575957][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.585655][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.596158][ T8689] device bridge_slave_0 entered promiscuous mode
[  135.617188][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.629439][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.639218][ T8689] device bridge_slave_1 entered promiscuous mode
[  135.649351][ T8687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.658559][ T8687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.692342][ T8687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.724217][ T8685] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  135.743544][ T8685] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  135.761184][ T8685] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  135.783753][ T8685] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  135.820854][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.835556][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.865953][ T8687] device hsr_slave_0 entered promiscuous mode
[  135.874010][ T8687] device hsr_slave_1 entered promiscuous mode
[  135.880874][ T8687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.889390][ T8687] Cannot create hsr debugfs directory
[  135.908632][ T8689] team0: Port device team_slave_0 added
[  135.917015][ T8689] team0: Port device team_slave_1 added
[  135.977709][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.987878][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.022105][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.041437][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.052563][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.081881][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.183439][   T32] Bluetooth: hci0: command 0x0409 tx timeout
[  136.197696][ T8689] device hsr_slave_0 entered promiscuous mode
[  136.207995][ T8689] device hsr_slave_1 entered promiscuous mode
[  136.217263][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.226965][ T8689] Cannot create hsr debugfs directory
[  136.236329][ T8691] chnl_net:caif_netlink_parms(): no params data found
[  136.428332][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.441490][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.466390][ T8691] device bridge_slave_0 entered promiscuous mode
[  136.494647][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.504204][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.516988][ T8691] device bridge_slave_1 entered promiscuous mode
[  136.580557][ T8687] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  136.589685][   T38] Bluetooth: hci1: command 0x0409 tx timeout
[  136.606213][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.620444][ T8687] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  136.634843][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.657365][ T8687] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  136.675876][ T8687] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  136.706679][ T8685] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.721220][ T8691] team0: Port device team_slave_0 added
[  136.735633][ T8691] team0: Port device team_slave_1 added
[  136.778429][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.786260][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.820117][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.832056][   T39] Bluetooth: hci2: command 0x0409 tx timeout
[  136.843320][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.853457][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.889411][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.924360][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  136.936026][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  136.953262][ T8685] 8021q: adding VLAN 0 to HW filter on device team0
[  136.973534][ T8689] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  137.000349][ T8691] device hsr_slave_0 entered promiscuous mode
[  137.009963][ T8691] device hsr_slave_1 entered promiscuous mode
[  137.020439][ T8691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.030153][ T8691] Cannot create hsr debugfs directory
[  137.050168][ T8689] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  137.065618][ T8689] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  137.083671][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.094487][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.106465][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.115258][ T5010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.124415][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.139233][ T8689] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  137.194360][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.206224][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.216934][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.225379][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.235919][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.245390][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.255329][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.266519][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.276215][   T38] Bluetooth: hci3: command 0x0409 tx timeout
[  137.283015][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.326727][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.337677][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.348112][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.365676][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.406580][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.418901][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.434781][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.506724][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.518806][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.541035][ T8687] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.558549][ T8685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.586148][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.596920][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.620900][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  137.645462][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.669543][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  137.680190][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  137.690585][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.700430][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.710744][ T8691] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  137.723998][ T8691] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  137.759362][ T8691] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  137.775214][ T8689] 8021q: adding VLAN 0 to HW filter on device team0
[  137.787649][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.802352][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.811547][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.820795][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.830305][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.865049][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.878040][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.886977][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.896033][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.906415][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.917910][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.962614][ T8691] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  137.976340][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  137.988291][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  138.002332][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.015215][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.026522][ T8685] device veth0_vlan entered promiscuous mode
[  138.045113][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.054930][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  138.065202][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.112229][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.125006][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.145104][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.154911][ T9455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.164042][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.175036][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.186023][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.194604][ T9455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.205154][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.214493][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.222912][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.231387][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.244572][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.257551][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.262235][   T38] Bluetooth: hci0: command 0x041b tx timeout
[  138.273347][ T8685] device veth1_vlan entered promiscuous mode
[  138.312418][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  138.321839][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  138.332834][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.342506][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.352147][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.362432][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.387201][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.401268][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.420983][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.436094][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.448243][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  138.461803][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.495291][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  138.520238][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  138.533075][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.543690][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  138.555672][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  138.625283][ T8685] device veth0_macvtap entered promiscuous mode
[  138.640235][ T8685] device veth1_macvtap entered promiscuous mode
[  138.661879][ T9518] Bluetooth: hci1: command 0x041b tx timeout
[  138.705986][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.736337][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.756542][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.766502][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.784800][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.794723][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.806543][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.817615][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.843035][ T8691] 8021q: adding VLAN 0 to HW filter on device team0
[  138.860641][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.874378][ T8687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.891839][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.904149][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.912119][ T9530] Bluetooth: hci2: command 0x041b tx timeout
[  138.915472][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.929225][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.938687][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  138.950776][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  138.978601][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.995646][ T8685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.008055][ T8685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.028196][ T8685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.040688][ T8685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.069701][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.079351][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.092353][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.103124][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.112081][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.122236][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.135458][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.148164][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  139.162044][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  139.172582][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.183240][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.246652][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.260176][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.272834][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.284569][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.295961][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.307814][ T9530] Bluetooth: hci3: command 0x041b tx timeout
[  139.334893][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.345957][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.356520][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.367829][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.379119][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.389255][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.421305][ T8687] device veth0_vlan entered promiscuous mode
[  139.432572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.443078][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.454552][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.467555][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.490548][ T8689] device veth0_vlan entered promiscuous mode
[  139.509532][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.520107][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.538818][ T8689] device veth1_vlan entered promiscuous mode
[  139.556857][ T8687] device veth1_vlan entered promiscuous mode
[  139.580178][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.595822][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.608629][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.618947][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.635819][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.713538][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.723374][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.742497][ T9566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.774464][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.784721][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.806491][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.807204][ T8689] device veth0_macvtap entered promiscuous mode
[  139.817233][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.840588][ T8689] device veth1_macvtap entered promiscuous mode
[  139.852003][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.863751][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.873779][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.886077][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.896161][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.914854][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.935646][ T8687] device veth0_macvtap entered promiscuous mode
[  139.946930][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.958562][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.981458][ T8687] device veth1_macvtap entered promiscuous mode
[  140.000569][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.010735][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.028159][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  140.040949][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.056688][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.070746][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
18:26:13 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  140.083325][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.097908][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.114121][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.126887][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.137950][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.150175][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
18:26:13 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  140.161290][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.173465][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.197971][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  140.216637][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.230204][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  140.248640][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.274376][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_0
18:26:13 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  140.298478][ T8689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.309287][ T8689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.320578][ T8689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.335207][ T8689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.342047][ T9566] Bluetooth: hci0: command 0x040f tx timeout
[  140.357209][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.368379][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.389216][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  140.403715][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
18:26:13 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  140.420687][ T8687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  140.437452][ T8687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.453890][ T8687] batman_adv: batadv0: Interface activated: batadv_slave_1
18:26:13 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  140.489267][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.499989][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.509827][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.519140][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.529505][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.538251][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.547311][ T8687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.557694][ T8687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.569232][ T8687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.580599][ T8687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.629941][ T8691] device veth0_vlan entered promiscuous mode
[  140.714480][ T8691] device veth1_vlan entered promiscuous mode
[  140.727459][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.746494][ T9518] Bluetooth: hci1: command 0x040f tx timeout
[  140.753244][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.778425][ T9530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.893195][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.913391][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  140.926954][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.932765][ T8841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.935021][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.955786][ T8841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.959374][ T8691] device veth0_macvtap entered promiscuous mode
[  140.972539][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.982268][ T9530] Bluetooth: hci2: command 0x040f tx timeout
[  140.984449][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  140.999289][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.012552][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.016845][ T8691] device veth1_macvtap entered promiscuous mode
[  141.025024][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.063748][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.077319][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.097238][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  141.110575][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.124005][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  141.136319][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.147971][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  141.161553][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.176651][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.187198][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  141.203928][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.219265][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  141.233115][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.246322][ T8691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  141.259159][ T8691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.274577][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1
18:26:14 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

[  141.310899][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
18:26:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x8}]}, 0x18}}, 0x0)

[  141.322855][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.336300][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.348629][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.372646][ T8691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.392475][ T9530] Bluetooth: hci3: command 0x040f tx timeout
[  141.394872][ T8691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.415816][ T8691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.427807][ T8691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.550762][ T9288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.561126][ T9288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.571172][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.598911][ T9288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.622836][ T9288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.635796][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
18:26:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x29, 0x4b, 0x0, 0x300)

18:26:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x8}]}, 0x18}}, 0x0)

18:26:14 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

18:26:14 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x29, 0x4b, 0x0, 0x300)

18:26:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x8}]}, 0x18}}, 0x0)

18:26:15 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

18:26:15 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x29, 0x4b, 0x0, 0x300)

18:26:15 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001e000009dbdf25000000"], 0x14}}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000001880)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002780))

18:26:15 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 3:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
close(r1)

18:26:15 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 3:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

[  142.422443][ T9567] Bluetooth: hci0: command 0x0419 tx timeout
18:26:15 executing program 2:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c62353b8f2c81700000000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r1 = socket$kcm(0x11, 0xa, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48)

18:26:15 executing program 3:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 1:
setresuid(0xee00, 0xee00, 0xee00)
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040), &(0x7f0000000080))
setresuid(0xee00, r0, 0x0)

18:26:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 2:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 1:
setresuid(0xee00, 0xee00, 0xee00)
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040), &(0x7f0000000080))
setresuid(0xee00, r0, 0x0)

18:26:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}}, 0x0)

18:26:15 executing program 3:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

18:26:15 executing program 1:
setresuid(0xee00, 0xee00, 0xee00)
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040), &(0x7f0000000080))
setresuid(0xee00, r0, 0x0)

18:26:15 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"})
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="8131ee7e19ff010000008107008d2300000000a440f03562e3493c00dd5436b560000001040000000000604d6c7d00000000935c4d8810a49792055fd2826150", 0x40, 0x1c0}])

18:26:15 executing program 2:
r0 = fork()
wait4(0x0, &(0x7f0000000000), 0x0, 0x0)
rt_sigqueueinfo(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x80000001})

[  142.743953][ T9795] loop0: detected capacity change from 0 to 1
18:26:15 executing program 1:
setresuid(0xee00, 0xee00, 0xee00)
getresuid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040), &(0x7f0000000080))
setresuid(0xee00, r0, 0x0)

[  142.804745][ T9795]  loop0: [ICS]
[  142.835197][ T1711] Bluetooth: hci1: command 0x0419 tx timeout
18:26:15 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

18:26:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00))

[  142.884452][ T9811] loop1: detected capacity change from 0 to 128
[  142.900025][ T9795] loop0: detected capacity change from 0 to 1
18:26:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

18:26:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00))

[  142.969203][ T9795]  loop0: [ICS]
18:26:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"})
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="8131ee7e19ff010000008107008d2300000000a440f03562e3493c00dd5436b560000001040000000000604d6c7d00000000935c4d8810a49792055fd2826150", 0x40, 0x1c0}])

18:26:16 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

18:26:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00))

[  143.070533][ T9518] Bluetooth: hci2: command 0x0419 tx timeout
18:26:16 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

[  143.108502][ T9827] loop0: detected capacity change from 0 to 1
18:26:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

[  143.182601][ T9837] loop1: detected capacity change from 0 to 128
[  143.195584][ T9827]  loop0: [ICS]
18:26:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801002000400003000000000000008000297eb190f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x600}, {&(0x7f0000010400)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100087ea70325132510000ea7032510300000000002e2e202020202020202020100087ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200087ea70325132510000ea70325104001a040000", 0x80, 0x1400}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1600}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x1c00}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4200}], 0x0, &(0x7f0000010f00))

18:26:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"})
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="8131ee7e19ff010000008107008d2300000000a440f03562e3493c00dd5436b560000001040000000000604d6c7d00000000935c4d8810a49792055fd2826150", 0x40, 0x1c0}])

18:26:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

[  143.330573][ T9851] loop1: detected capacity change from 0 to 128
[  143.345094][ T9850] loop0: detected capacity change from 0 to 1
[  143.482822][ T9518] Bluetooth: hci3: command 0x0419 tx timeout
18:26:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

[  143.504656][ T9850]  loop0: [ICS]
18:26:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

18:26:16 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed005400000000003ec13e20000000000100"})
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="8131ee7e19ff010000008107008d2300000000a440f03562e3493c00dd5436b560000001040000000000604d6c7d00000000935c4d8810a49792055fd2826150", 0x40, 0x1c0}])

18:26:16 executing program 3:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

[  143.689318][ T9870] loop0: detected capacity change from 0 to 1
[  143.764225][ T9870]  loop0: [ICS]
18:26:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_open_dev$midi(&(0x7f0000000140), 0xb6, 0x60002)
close(r2)

18:26:16 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x3}}, 0x2e)
close(r1)

18:26:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fff3000200000000000005"], 0x14}}, 0x0)

18:26:17 executing program 2:
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

[  143.979640][ T9901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
18:26:17 executing program 1:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000940)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_uring_enter(r0, 0x7fbb, 0x0, 0x0, 0x0, 0x0)

18:26:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fff3000200000000000005"], 0x14}}, 0x0)

18:26:17 executing program 3:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 1:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000940)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_uring_enter(r0, 0x7fbb, 0x0, 0x0, 0x0, 0x0)

18:26:17 executing program 1:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000940)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_uring_enter(r0, 0x7fbb, 0x0, 0x0, 0x0, 0x0)

18:26:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fff3000200000000000005"], 0x14}}, 0x0)

18:26:17 executing program 1:
r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000940)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in={0x2, 0x0, @loopback}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_uring_enter(r0, 0x7fbb, 0x0, 0x0, 0x0, 0x0)

18:26:17 executing program 2:
prlimit64(0x0, 0x2, &(0x7f0000000080)={0x0, 0x80000000}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000000f000/0x4000)=nil)

18:26:17 executing program 3:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 1:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000007880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c41e000002c903"], 0x1ec4}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fff3000200000000000005"], 0x14}}, 0x0)

18:26:17 executing program 2:
prlimit64(0x0, 0x2, &(0x7f0000000080)={0x0, 0x80000000}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000000f000/0x4000)=nil)

18:26:17 executing program 2:
prlimit64(0x0, 0x2, &(0x7f0000000080)={0x0, 0x80000000}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000000f000/0x4000)=nil)

18:26:17 executing program 2:
prlimit64(0x0, 0x2, &(0x7f0000000080)={0x0, 0x80000000}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000000f000/0x4000)=nil)

18:26:17 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:17 executing program 1:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 3:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  144.614506][    C0] hrtimer: interrupt took 29894 ns
[  144.652504][ T9961] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
18:26:17 executing program 1:
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x15})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}})
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)="da92c887", 0x4}], 0x1, 0x0, 0x0)

18:26:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}}, 0x1c}}, 0x0)

18:26:18 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}}, 0x1c}}, 0x0)

18:26:18 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}}, 0x1c}}, 0x0)

18:26:18 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:18 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}}, 0x1c}}, 0x0)

18:26:18 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:18 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:18 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:18 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:18 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:19 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:19 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:19 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:19 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:19 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:20 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:20 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:20 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000008f"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\xcd[,\\\xde#\'\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103], 0x100000, 0xc0440})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:26:20 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002400)={{<r1=>0x0, 0x7fff, 0x100000000, 0x7f, 0x11d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x5, 0xfff}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "8bebeb894f74c3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054880)={0x8, [], 0x1f, "3a3c34046145f8"})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack_expect\x00')
preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0)

18:26:20 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

18:26:20 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:20 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

18:26:20 executing program 0:
r0 = shmget(0x1, 0x4000, 0x202, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)

18:26:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

18:26:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

18:26:21 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

18:26:21 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

18:26:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

18:26:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000180))
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x4000001})
fcntl$lock(r0, 0x7, &(0x7f00000011c0)={0x0, 0x0, 0x800, 0xfffffffffffffffd, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x7fff, 0x0, 0xffffffffffffffff})

18:26:21 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

18:26:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

[  148.439463][T10134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
18:26:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x2f}}], 0x48}, 0x0)

18:26:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x2f}}], 0x48}, 0x0)

18:26:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

18:26:21 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:21 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:21 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x2f}}], 0x48}, 0x0)

[  148.896727][T10164] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
18:26:22 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1, 0x2f}}], 0x48}, 0x0)

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
inotify_add_watch(r3, 0x0, 0x0)

18:26:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:22 executing program 3:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 2:
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/107)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/46)
msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001939d6313d97189b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046df213bf68fc066f39a4f3c2376182d6da63102a6c1519bf8d944129fe802bd5e0788ec4b895466"], 0x70, 0x1, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/198}, 0xce, 0x2, 0x0)
msgrcv(0x0, &(0x7f00000008c0)=ANY=[], 0xd2, 0x0, 0x1000)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x40, &(0x7f0000000180))
r0 = socket(0x5, 0x3, 0x2)
write(r0, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)
syz_open_dev$tty20(0xc, 0x4, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000006740), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009041e11000000000c0000000000000800040006000000", 0x24)

18:26:22 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x29)

18:26:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x29)

18:26:23 executing program 0:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x29)

18:26:23 executing program 0:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x29)

18:26:23 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:23 executing program 0:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:23 executing program 0:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:24 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:24 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:24 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:24 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:25 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

18:26:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:25 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:25 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:25 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002780)={<r0=>0x0, ""/256, <r1=>0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local, 0x6a})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001380)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x2400200})
ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2, 0x6c00})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001880)=ANY=[@ANYRES64=r4, @ANYBLOB])
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r4})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{r4, 0x0, 0x0, 0x5d15cc1d, 0x0, 0x8a, 0x6, 0x1ff, 0x0, 0x3f, 0x401, 0x6, 0x2, 0x0, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cd80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x1, "07adf4c967778a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}], 0x2, "cf18bafd511fb0"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x29aa, [{0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r1}, {}, {r0}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {}, {}, {r0}, {}, {r1, r2}, {r0, r2}, {}, {}, {}, {}, {0x0, r2}, {r1}, {r0, r2}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {r1}, {r0, r2}, {r0}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {r0}, {}, {r1}, {r1}, {}, {}, {r0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r1}, {r1}, {}, {r0}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {r0, r2}, {r1}, {r1, r2}, {}, {}, {r1}, {r1, r2}, {}, {r1, r2}, {r1, r2}, {r1, r2}, {r1}, {0x0, r2}, {r0, r2}, {0x0, r2}, {}, {0x0, r2}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r1}, {0x0, r2}, {r0}, {r1, r2}, {r1, r2}, {}, {0x0, r2}, {r1}, {}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r1}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0, r2}, {0x0, r2}, {}, {r1, r2}, {r0}, {}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r0}, {0x0, r2}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {}, {0x0, r2}, {r0}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1, r2}, {0x0, r2}, {}, {r1, r2}, {r0, r2}, {r0}, {r1}, {}, {}, {}, {r0, r2}, {}, {r0}, {r0}, {r0, r2}, {r0}, {r0}, {r0, r2}, {0x0, r2}, {r0}, {0x0, r2}, {}, {r1}, {}, {}, {0x0, r2}, {r1}, {}, {0x0, r2}, {r1}, {0x0, r2}, {r1, r2}, {r1}, {}, {r1}, {0x0, r2}, {0x0, r2}, {r0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {r0}, {}, {r0, r2}, {}, {r1}, {}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {r1}, {0x0, r2}, {}, {0x0, r2}, {r0}, {r1, r2}, {}, {r0}, {}, {0x0, r2}, {0x0, r2}, {}, {r1, r2}, {0x0, r2}, {}, {0x0, r2}, {r1, r2}, {}, {r0}, {0x0, r2}, {}, {}, {r0}, {0x0, r2}, {r1}, {0x0, r2}, {0x0, r2}, {}, {0x0, r2}, {}, {r0}, {r1}, {}, {}, {}, {r1, r2}], 0x4, "91e3a11f42bc17"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')

18:26:25 executing program 0:
futex(&(0x7f0000000180), 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0)

18:26:25 executing program 0:
futex(&(0x7f0000000180), 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0)

18:26:25 executing program 3:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
setns(r0, 0x0)

18:26:25 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:25 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:25 executing program 0:
futex(&(0x7f0000000180), 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0)

18:26:26 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:26 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:26 executing program 0:
futex(&(0x7f0000000180), 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0)

18:26:26 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8949, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0})

18:26:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:26 executing program 1:
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0})

18:26:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
dup2(r0, r1)

18:26:26 executing program 1:
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0})

18:26:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:26 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:26 executing program 1:
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0})

18:26:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:26 executing program 1:
r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x0, 0x7, 0x0})

18:26:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:27 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x541b, 0x0)

18:26:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

[  154.133623][    C3] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:27 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:27 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:27 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:28 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:28 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

[  155.093890][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

18:26:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

18:26:28 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

[  155.428487][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  155.492283][    C2] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:28 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:28 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

[  155.757338][    C2] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

[  155.875730][    C3] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:29 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:29 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
listen(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000166000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0)
open(0x0, 0x0, 0x0)
accept(r1, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x80)

18:26:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

18:26:29 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x2202)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
unshare(0x42000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
unshare(0x2000000)

18:26:29 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

[  156.461299][    C2] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
18:26:29 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

18:26:29 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000)

18:26:29 executing program 3:
clone(0x10300100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{}]}]}}, &(0x7f0000000380)=""/249, 0x32, 0xf9, 0x8}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  156.779921][T10875] BPF:[1] FUNC_PROTO (anon) 
[  156.784713][T10875] BPF:return=0 args=(
[  156.788642][T10875] BPF:vararg
[  156.792127][T10875] BPF:)
[  156.792136][T10875] BPF: 
[  156.792141][T10875] BPF:Invalid btf_info kind_flag
[  156.792147][T10875] BPF:
[  156.792147][T10875] 
[  156.793572][T10875] BPF:[1] FUNC_PROTO (anon) 
[  156.813761][T10875] BPF:return=0 args=(
[  156.818520][T10875] BPF:vararg
[  156.822414][T10875] BPF:)
[  156.825269][T10875] BPF: 
[  156.828220][T10875] BPF:Invalid btf_info kind_flag
[  156.834879][T10875] BPF:
[  156.834879][T10875] 
18:26:29 executing program 3:
clone(0x10300100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{}]}]}}, &(0x7f0000000380)=""/249, 0x32, 0xf9, 0x8}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

18:26:29 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x23, 0xc, 0x0, 0x1, [{0xc, 0x8, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x5c}}, 0x0)

18:26:30 executing program 1:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x3000005, 0x92132, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, 0x0, 0x0)

[  156.899253][T10888] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'.
[  156.913124][T10889] BPF:[1] FUNC_PROTO (anon) 
[  156.918739][T10889] BPF:return=0 args=(
[  156.932336][T10889] BPF:vararg
[  156.936334][T10889] BPF:)
[  156.940066][T10889] BPF: 
18:26:30 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x23, 0xc, 0x0, 0x1, [{0xc, 0x8, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x5c}}, 0x0)

[  156.951198][T10889] BPF:Invalid btf_info kind_flag
18:26:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

[  156.981721][T10889] BPF:
[  156.981721][T10889] 
18:26:30 executing program 3:
clone(0x10300100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{}]}]}}, &(0x7f0000000380)=""/249, 0x32, 0xf9, 0x8}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  157.010330][T10897] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.027158][T10902] BPF:[1] FUNC_PROTO (anon) 
[  157.034264][T10902] BPF:return=0 args=(
18:26:30 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x23, 0xc, 0x0, 0x1, [{0xc, 0x8, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x5c}}, 0x0)

[  157.047414][T10902] BPF:vararg
[  157.050816][T10902] BPF:)
18:26:30 executing program 1:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x3000005, 0x92132, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, 0x0, 0x0)

[  157.054493][T10902] BPF: 
[  157.057498][T10902] BPF:Invalid btf_info kind_flag
[  157.064480][T10902] BPF:
[  157.064480][T10902] 
18:26:30 executing program 3:
clone(0x10300100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{}]}]}}, &(0x7f0000000380)=""/249, 0x32, 0xf9, 0x8}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  157.107629][T10907] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.138576][T10909] BPF:[1] FUNC_PROTO (anon) 
[  157.147029][T10909] BPF:return=0 args=(
18:26:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

[  157.157311][T10909] BPF:vararg
[  157.161410][T10909] BPF:)
[  157.166491][T10909] BPF: 
18:26:30 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x23, 0xc, 0x0, 0x1, [{0xc, 0x8, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x5c}}, 0x0)

[  157.169710][T10909] BPF:Invalid btf_info kind_flag
[  157.180327][T10909] BPF:
[  157.180327][T10909] 
[  157.225511][T10917] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'.
18:26:30 executing program 1:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x3000005, 0x92132, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, 0x0, 0x0)

18:26:30 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/56, 0x38}], 0x7, 0x0, 0x0)

18:26:30 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{}, [@alu={0x7, 0x1}, @generic={0x3d}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001640)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

18:26:30 executing program 1:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x3000005, 0x92132, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, 0x0, 0x0)

18:26:30 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/56, 0x38}], 0x7, 0x0, 0x0)

18:26:30 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{}, [@alu={0x7, 0x1}, @generic={0x3d}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001640)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

18:26:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{}, [@alu={0x7, 0x1}, @generic={0x3d}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001640)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

18:26:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x5, &(0x7f0000000200)=@framed={{}, [@alu={0x7, 0x1}, @generic={0x3d}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001640)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

18:26:30 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/56, 0x38}], 0x7, 0x0, 0x0)

18:26:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:30 executing program 3:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/56, 0x38}], 0x7, 0x0, 0x0)

18:26:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 1:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:30 executing program 3:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000001000/0x2000)=nil)

18:26:31 executing program 1:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 2:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 2:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 1:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f00000000c0)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\x00\x00\x00\x00]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x01\x00\x00\x80\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00t)o\x06l\x15\x95\x1e\x00\x00\x00\x00')

18:26:31 executing program 2:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:31 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

18:26:31 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f00000000c0)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\x00\x00\x00\x00]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x01\x00\x00\x80\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00t)o\x06l\x15\x95\x1e\x00\x00\x00\x00')

18:26:32 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

18:26:32 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f00000000c0)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\x00\x00\x00\x00]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x01\x00\x00\x80\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00t)o\x06l\x15\x95\x1e\x00\x00\x00\x00')

18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

[  159.068415][ T3400] ieee802154 phy0 wpan0: encryption failed: -22
[  159.077098][ T3400] ieee802154 phy1 wpan1: encryption failed: -22
18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

18:26:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xfdfdffff})

18:26:32 executing program 0:
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
getresuid(&(0x7f0000005a00), &(0x7f0000005a40), &(0x7f0000005a80))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x82a}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xee01, r3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000005ac0), 0x800, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x201, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r6}}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "26238626"}]}, 0x30}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x208a80, 0xa)
ioctl$GIO_UNIMAP(r1, 0x541b, &(0x7f0000000040)={0x0, 0x0})

18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

18:26:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xfdfdffff})

18:26:32 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8916, &(0x7f00000000c0)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\x00\x00\x00\x00]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x01\x00\x00\x80\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00t)o\x06l\x15\x95\x1e\x00\x00\x00\x00')

18:26:32 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000)
recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

[  159.285063][T11047] ==================================================================
[  159.294919][T11047] BUG: KASAN: use-after-free in alloc_ucounts+0x19b/0x5b0
[  159.303035][T11047] Write of size 4 at addr ffff888025ac691c by task syz-executor.0/11047
[  159.316219][T11047] 
[  159.319277][T11047] CPU: 1 PID: 11047 Comm: syz-executor.0 Not tainted 5.14.0-rc4-syzkaller #0
[  159.329399][T11047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  159.339686][T11047] Call Trace:
[  159.342968][T11047]  dump_stack_lvl+0xcd/0x134
[  159.347415][T11047]  print_address_description.constprop.0.cold+0x6c/0x2d6
[  159.356013][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  159.361695][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  159.366825][T11047]  kasan_report.cold+0x83/0xdf
[  159.373520][T11047]  ? trace_hardirqs_on_caller+0x161/0x1c0
[  159.380805][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  159.385807][T11047]  kasan_check_range+0x13d/0x180
[  159.391561][T11047]  alloc_ucounts+0x19b/0x5b0
[  159.397364][T11047]  ? put_ucounts+0x150/0x150
[  159.402838][T11047]  ? setid_policy_lookup+0x121/0x2f0
[  159.409026][T11047]  set_cred_ucounts+0x171/0x3a0
[  159.414235][T11047]  __sys_setresuid+0x62c/0x840
[  159.419852][T11047]  do_syscall_64+0x35/0xb0
[  159.425340][T11047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  159.432543][T11047] RIP: 0033:0x4665e9
[  159.437235][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  159.460512][T11047] RSP: 002b:00007fb240122188 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[  159.470546][T11047] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  159.479979][T11047] RDX: 0000000000000000 RSI: 0000000000000180 RDI: 000000000000ee01
[  159.489157][T11047] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[  159.498627][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[  159.508436][T11047] R13: 00007ffd71c8d0df R14: 00007fb240122300 R15: 0000000000022000
[  159.517607][T11047] 
[  159.520388][T11047] Allocated by task 10971:
[  159.525948][T11047]  kasan_save_stack+0x1b/0x40
[  159.532545][T11047]  __kasan_kmalloc+0x98/0xc0
[  159.538808][T11047]  kmem_cache_alloc_trace+0x1e4/0x480
[  159.545214][T11047]  alloc_ucounts+0x23d/0x5b0
[  159.550745][T11047]  set_cred_ucounts+0x171/0x3a0
[  159.557229][T11047]  __sys_setresuid+0x62c/0x840
[  159.563033][T11047]  do_syscall_64+0x35/0xb0
[  159.568184][T11047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  159.575914][T11047] 
[  159.579878][T11047] Freed by task 21:
[  159.584485][T11047]  kasan_save_stack+0x1b/0x40
[  159.589975][T11047]  kasan_set_track+0x1c/0x30
[  159.595689][T11047]  kasan_set_free_info+0x20/0x30
[  159.602364][T11047]  __kasan_slab_free+0xcd/0x100
[  159.607884][T11047]  kfree+0x106/0x2c0
[  159.612384][T11047]  put_ucounts+0x117/0x150
[  159.617498][T11047]  put_cred_rcu+0x27a/0x520
[  159.622716][T11047]  rcu_core+0x7ab/0x1380
[  159.627735][T11047]  __do_softirq+0x29b/0x9c2
[  159.633510][T11047] 
[  159.636193][T11047] Last potentially related work creation:
[  159.642716][T11047]  kasan_save_stack+0x1b/0x40
[  159.648293][T11047]  kasan_record_aux_stack+0xa4/0xd0
[  159.654380][T11047]  insert_work+0x48/0x370
[  159.659623][T11047]  __queue_work+0x5c1/0xed0
[  159.664752][T11047]  queue_work_on+0xee/0x110
[  159.670788][T11047]  call_usermodehelper_exec+0x1f0/0x4c0
[  159.678421][T11047]  kobject_uevent_env+0xf8f/0x1650
[  159.684767][T11047]  kobject_synth_uevent+0x701/0x850
[  159.691969][T11047]  uevent_store+0x20/0x50
[  159.697371][T11047]  dev_attr_store+0x50/0x80
[  159.702965][T11047]  sysfs_kf_write+0x110/0x160
[  159.708823][T11047]  kernfs_fop_write_iter+0x342/0x500
[  159.715082][T11047]  new_sync_write+0x426/0x650
[  159.720550][T11047]  vfs_write+0x75a/0xa40
[  159.725372][T11047]  ksys_write+0x12d/0x250
[  159.730709][T11047]  do_syscall_64+0x35/0xb0
[  159.736347][T11047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  159.743491][T11047] 
[  159.746159][T11047] Second to last potentially related work creation:
[  159.753555][T11047]  kasan_save_stack+0x1b/0x40
[  159.758814][T11047]  kasan_record_aux_stack+0xa4/0xd0
[  159.764735][T11047]  insert_work+0x48/0x370
[  159.769638][T11047]  __queue_work+0x5c1/0xed0
[  159.774865][T11047]  queue_work_on+0xee/0x110
[  159.780046][T11047]  call_usermodehelper_exec+0x1f0/0x4c0
[  159.786245][T11047]  kobject_uevent_env+0xf8f/0x1650
[  159.792255][T11047]  kobject_synth_uevent+0x701/0x850
[  159.798436][T11047]  uevent_store+0x20/0x50
[  159.803050][T11047]  dev_attr_store+0x50/0x80
[  159.807923][T11047]  sysfs_kf_write+0x110/0x160
[  159.813679][T11047]  kernfs_fop_write_iter+0x342/0x500
[  159.819681][T11047]  new_sync_write+0x426/0x650
[  159.825224][T11047]  vfs_write+0x75a/0xa40
[  159.830186][T11047]  ksys_write+0x12d/0x250
[  159.835173][T11047]  do_syscall_64+0x35/0xb0
[  159.840385][T11047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  159.847309][T11047] 
[  159.850136][T11047] The buggy address belongs to the object at ffff888025ac6900
[  159.850136][T11047]  which belongs to the cache kmalloc-192 of size 192
[  159.865925][T11047] The buggy address is located 28 bytes inside of
[  159.865925][T11047]  192-byte region [ffff888025ac6900, ffff888025ac69c0)
[  159.880171][T11047] The buggy address belongs to the page:
[  159.887014][T11047] page:ffffea000096b180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ac6
18:26:32 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xfdfdffff})

[  159.898696][T11047] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  159.907962][T11047] raw: 00fff00000000200 ffffea000099df48 ffffea00006e64c8 ffff888010840000
[  159.917557][T11047] raw: 0000000000000000 ffff888025ac6000 0000000100000010 0000000000000000
[  159.927415][T11047] page dumped because: kasan: bad access detected
[  159.934722][T11047] page_owner tracks the page as allocated
[  159.941566][T11047] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x242220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 8687, ts 140024872043, free_ts 134330208762
[  159.963348][T11047]  get_page_from_freelist+0xa72/0x2f80
[  159.970325][T11047]  __alloc_pages_slowpath.constprop.0+0x2e6/0x21b0
[  159.977974][T11047]  __alloc_pages+0x412/0x500
[  159.983658][T11047]  cache_grow_begin+0x75/0x460
[  159.989260][T11047]  cache_alloc_refill+0x27f/0x380
[  159.995140][T11047]  kmem_cache_alloc_trace+0x38c/0x480
[  160.001659][T11047]  addr_event.part.0+0x7b/0x4d0
[  160.007710][T11047]  inetaddr_event+0x12c/0x190
[  160.013138][T11047]  notifier_call_chain+0xb5/0x200
[  160.019376][T11047]  blocking_notifier_call_chain+0x67/0x90
[  160.026455][T11047]  __inet_insert_ifa+0x919/0xc20
[  160.032626][T11047]  inet_rtm_newaddr+0xcbf/0x1380
[  160.038564][T11047]  rtnetlink_rcv_msg+0x413/0xb80
[  160.044232][T11047]  netlink_rcv_skb+0x153/0x420
[  160.049751][T11047]  netlink_unicast+0x533/0x7d0
[  160.055258][T11047]  netlink_sendmsg+0x86d/0xdb0
[  160.060555][T11047] page last free stack trace:
[  160.065954][T11047]  free_pcp_prepare+0x2c5/0x780
[  160.071710][T11047]  free_unref_page+0x19/0x690
[  160.077162][T11047]  slabs_destroy+0x89/0xc0
[  160.082485][T11047]  ___cache_free+0x4c6/0x610
[  160.087621][T11047]  qlist_free_all+0x4e/0x110
[  160.093139][T11047]  kasan_quarantine_reduce+0x180/0x200
[  160.099411][T11047]  __kasan_slab_alloc+0x8b/0xa0
[  160.105036][T11047]  kmem_cache_alloc+0x25f/0x540
[  160.110602][T11047]  __kernfs_new_node+0xd4/0x8b0
[  160.116478][T11047]  kernfs_new_node+0x93/0x120
[  160.121942][T11047]  __kernfs_create_file+0x51/0x350
[  160.127612][T11047]  sysfs_add_file_mode_ns+0x226/0x540
[  160.133774][T11047]  internal_create_group+0x328/0xb20
[  160.140166][T11047]  internal_create_groups.part.0+0x90/0x140
[  160.147368][T11047]  sysfs_create_groups+0x25/0x50
[  160.153332][T11047]  kobject_add_internal+0x583/0xa60
[  160.159643][T11047] 
[  160.162927][T11047] Memory state around the buggy address:
[  160.169401][T11047]  ffff888025ac6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  160.179178][T11047]  ffff888025ac6880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  160.189332][T11047] >ffff888025ac6900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.199023][T11047]                             ^
[  160.204653][T11047]  ffff888025ac6980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  160.214133][T11047]  ffff888025ac6a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  160.223730][T11047] ==================================================================
[  160.233928][T11047] Disabling lock debugging due to kernel taint
18:26:33 executing program 3:
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f00000000c0)="b4", 0x0)
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000)

18:26:33 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x0, 0xfdfdffff})

[  160.522423][T11047] Kernel panic - not syncing: panic_on_warn set ...
[  160.531477][T11047] CPU: 0 PID: 11047 Comm: syz-executor.0 Tainted: G    B             5.14.0-rc4-syzkaller #0
[  160.544623][T11047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[  160.555532][T11047] Call Trace:
[  160.559464][T11047]  dump_stack_lvl+0xcd/0x134
[  160.564786][T11047]  panic+0x306/0x73d
[  160.569709][T11047]  ? __warn_printk+0xf3/0xf3
[  160.574955][T11047]  ? preempt_schedule_common+0x59/0xc0
[  160.581022][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  160.586286][T11047]  ? preempt_schedule_thunk+0x16/0x18
[  160.592264][T11047]  ? trace_hardirqs_on+0x38/0x1c0
[  160.597360][T11047]  ? trace_hardirqs_on+0x51/0x1c0
[  160.602127][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  160.606975][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  160.612066][T11047]  end_report.cold+0x5a/0x5a
[  160.616977][T11047]  kasan_report.cold+0x71/0xdf
[  160.621849][T11047]  ? trace_hardirqs_on_caller+0x161/0x1c0
[  160.627105][T11047]  ? alloc_ucounts+0x19b/0x5b0
[  160.632697][T11047]  kasan_check_range+0x13d/0x180
[  160.637638][T11047]  alloc_ucounts+0x19b/0x5b0
[  160.641937][T11047]  ? put_ucounts+0x150/0x150
[  160.647127][T11047]  ? setid_policy_lookup+0x121/0x2f0
[  160.652942][T11047]  set_cred_ucounts+0x171/0x3a0
[  160.657819][T11047]  __sys_setresuid+0x62c/0x840
[  160.662686][T11047]  do_syscall_64+0x35/0xb0
[  160.666783][T11047]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  160.673429][T11047] RIP: 0033:0x4665e9
[  160.678336][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  160.700195][T11047] RSP: 002b:00007fb240122188 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[  160.709070][T11047] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  160.716394][T11047] RDX: 0000000000000000 RSI: 0000000000000180 RDI: 000000000000ee01
[  160.724869][T11047] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000
[  160.732544][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80
[  160.741222][T11047] R13: 00007ffd71c8d0df R14: 00007fb240122300 R15: 0000000000022000
[  160.751589][T11047] Kernel Offset: disabled
[  160.755716][T11047] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:26:32  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=00000000ffffc820 RCX=0000000000000000 RDX=1ffff11005948051
RSI=ffffffff81639604 RDI=ffff88802ca40288 RBP=ffff888027b356a0 RSP=ffffc900047afb98
R8 =0000000008200000 R9 =0000000000000003 R10=ffffffff8163952e R11=0000000000000000
R12=ffff88802ca40240 R13=00000000ffffc821 R14=ffff888027b356a0 R15=ffff888027b35660
RIP=ffffffff8164330b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802ca00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b32c22000 CR3=000000004a363000 CR4=00150ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffffff
XMM06=ffffffffffffffffffffffffffffffff XMM07=000000000000000000e800a800000000
XMM08=2570756c6c25706f6f6c2f7665642f00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff84330a2c RDI=ffffffff904f9ea0 RBP=ffffffff904f9e60 RSP=ffffc90002c9f900
R8 =000000000000005d R9 =0000000000000000 R10=ffffffff84330a1d R11=000000000000001f
R12=0000000000000000 R13=fffffbfff209f41f R14=fffffbfff209f3d6 R15=dffffc0000000000
RIP=ffffffff84330a52 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb240122700 ffffffff 00c00000
GS =0000 ffff88802cb00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000003e000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000003c000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000020003040 CR3=000000004e630000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=000000000000000000000000000000ff
XMM02=000000000000000000000000000000ff XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffffff
XMM06=ffffffffffffffffffffffffffffffff XMM07=00000000000000000000000000000000
XMM08=61662029736e74656e28736e74657300 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=00000000000bcd25 RBX=ffff8880116ae100 RCX=ffffffff892a621f RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000002 RSP=ffffc9000066fdf8
R8 =0000000000000001 R9 =ffff88802cc52b4b R10=ffffed100598a569 R11=0000000000000000
R12=ffffed10022d5c20 R13=0000000000000002 R14=ffffffff8d6c41d0 R15=0000000000000000
RIP=ffffffff892d016b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 000fffff 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 000fffff 00000000
FS =0000 0000000000000000 000fffff 00000000
GS =0000 ffff88802cc00000 000fffff 00000000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe0000079000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000077000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000001bee708 CR3=000000006d889000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=ffffffffffffffffffffffffffffff00 XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffff00
XMM06=ffffffffffffffffffffffffffffffff XMM07=000000000000000000e800a800000000
XMM08=2570756c6c25706f6f6c2f7665642f00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=0000000000000001 RBX=1ffff920004acf6c RCX=0000000000000000 RDX=ffff888049032140
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002567c08 RSP=ffffc90002567b38
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff81698049 R11=0000000000000000
R12=ffff88802cd52c00 R13=0000000000000001 R14=0000000000000003 R15=ffffed10059aa581
RIP=ffffffff8174d983 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802cd00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe00000b4000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000b2000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000002ead708 CR3=00000000248b6000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffffffffffffffffffffffffffff XMM05=ffffffffffffffffffffffffffffffff
XMM06=ffffffffffffffffffffffffffffffff XMM07=000000000000000000e800a800000000
XMM08=2570756c6c25706f6f6c2f7665642f00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000