[  OK  ] Started Getty on tty2.
[  OK  ] Started System Logging Service.
[  OK  ] Found device /dev/ttyS0.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Reached target Login Prompts.


Debian GNU/Linux 9 syzkaller ttyS0

syzkaller login: [   79.761326][ T8346] sshd (8346) used greatest stack depth: 3816 bytes left
Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts.
2020/08/02 03:09:02 fuzzer started
2020/08/02 03:09:03 dialing manager at 10.128.0.26:34229
2020/08/02 03:09:03 syscalls: 3152
2020/08/02 03:09:03 code coverage: enabled
2020/08/02 03:09:03 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2020/08/02 03:09:03 extra coverage: enabled
2020/08/02 03:09:03 setuid sandbox: enabled
2020/08/02 03:09:03 namespace sandbox: enabled
2020/08/02 03:09:03 Android sandbox: enabled
2020/08/02 03:09:03 fault injection: enabled
2020/08/02 03:09:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/08/02 03:09:03 net packet injection: enabled
2020/08/02 03:09:03 net device setup: enabled
2020/08/02 03:09:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/08/02 03:09:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/08/02 03:09:03 USB emulation: /dev/raw-gadget does not exist
2020/08/02 03:09:03 hci packet injection: enabled
03:11:27 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x36315247}})

[  236.972117][   T33] audit: type=1400 audit(1596337887.541:8): avc:  denied  { execmem } for  pid=8450 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[  237.320960][ T8451] IPVS: ftp: loaded support on port[0] = 21
[  237.583905][ T8451] chnl_net:caif_netlink_parms(): no params data found
[  237.834477][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.842561][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.852116][ T8451] device bridge_slave_0 entered promiscuous mode
[  237.872464][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.880103][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.889504][ T8451] device bridge_slave_1 entered promiscuous mode
[  237.948873][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.965121][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.039360][ T8451] team0: Port device team_slave_0 added
[  238.051317][ T8451] team0: Port device team_slave_1 added
[  238.103422][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.110709][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.138143][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.159145][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.166314][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.196366][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.376799][ T8451] device hsr_slave_0 entered promiscuous mode
[  238.630226][ T8451] device hsr_slave_1 entered promiscuous mode
[  239.158881][ T8451] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  239.207268][ T8451] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  239.397354][ T8451] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  239.677075][ T8451] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  240.081889][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.124833][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  240.133937][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  240.155588][ T8451] 8021q: adding VLAN 0 to HW filter on device team0
[  240.174548][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.184548][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.195325][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.202768][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.266691][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.276061][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.286333][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.295894][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.303279][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.312496][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.323499][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.334437][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.344829][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.355249][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.365791][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.376143][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.386138][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.395902][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.405887][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.421249][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.430804][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.488202][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.495924][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.517969][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.567747][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.578816][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.627609][ T8451] device veth0_vlan entered promiscuous mode
[  240.636347][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.647335][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.664794][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.673944][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.697762][ T8451] device veth1_vlan entered promiscuous mode
[  240.756019][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  240.766172][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  240.775926][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.786028][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.804896][ T8451] device veth0_macvtap entered promiscuous mode
[  240.822244][ T8451] device veth1_macvtap entered promiscuous mode
[  240.864173][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.872181][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.887365][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.896853][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  240.907098][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  240.937272][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.947422][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.961669][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:11:32 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000f97331346926348c8a8ad4bfa7489a58a3a5fc32fe91d00287e765581eaa231970bde1a7607796fef75b5658bfc1c669eb2ef359211498b2784a9470e3bd05be41c39aacd9f526fe0101c9b941d00692ccfbabc84748997b40e3fb8c0ce396a35ab32e7c6a0f90910932c6c465780c01c07558511ad77a330974897684b66644cfff7ac5ad39fd1c52da498700c84725fb9f9f8b25df77d0214a74f2676cb5bac80afb10f717c54b3e5dabde0da3bd70f73712f7464bda0824e4083dfcdb402c51da132256b90184640913e6ae959c188ecd60163a9b23d9a41313adfa0ff4a16004aa247ac793dd9e4859f1c90c00"/285], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="01800200000000000c002b8008000100", @ANYRES32=r4], 0x2c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000030800000000000000000000ffff", @ANYRES32=r7, @ANYBLOB="02"], 0x20}}, 0x0)

[  242.213941][ T8673] IPVS: ftp: loaded support on port[0] = 21
[  242.528974][ T8673] chnl_net:caif_netlink_parms(): no params data found
03:11:33 executing program 0:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb030018"], &(0x7f0000004600)=""/210, 0x4f, 0xd2, 0x8}, 0x20)

[  242.982276][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.991490][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.001058][ T8673] device bridge_slave_0 entered promiscuous mode
[  243.043666][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.051256][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.061240][ T8673] device bridge_slave_1 entered promiscuous mode
03:11:33 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
write(r0, &(0x7f0000000100)="f98dca7f2827bad806224b90", 0xc)

[  243.086891][ T8812] BPF:Unsupported version
[  243.103088][ T8815] BPF:Unsupported version
[  243.117792][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.164879][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.282943][ T8673] team0: Port device team_slave_0 added
[  243.297997][ T8673] team0: Port device team_slave_1 added
03:11:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  243.364778][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.372170][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.398820][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.517671][ T8848] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  243.520814][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.541048][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.567377][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
03:11:34 executing program 0:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xfd30)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)

[  243.756114][ T8673] device hsr_slave_0 entered promiscuous mode
[  243.811618][ T8673] device hsr_slave_1 entered promiscuous mode
[  243.878922][ T8673] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.886585][ T8673] Cannot create hsr debugfs directory
03:11:34 executing program 0:
syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00a00, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400040f090a0200027400f9", 0x16}], 0x0, &(0x7f00000000c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
munlockall()
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x4000010, r0, 0x83000000)
r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x77a0, 0x18202)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x3ff, 0x4)

[  244.241597][ T8907] FAT-fs (loop0): bogus sectors per cluster 15
[  244.248117][ T8907] FAT-fs (loop0): Can't find a valid FAT filesystem
[  244.302669][   T33] audit: type=1400 audit(1596337894.870:9): avc:  denied  { execute } for  pid=8906 comm="syz-executor.0" path="/proc/8906/clear_refs" dev="proc" ino=29240 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
[  244.357033][ T8907] FAT-fs (loop0): bogus sectors per cluster 15
[  244.363607][ T8907] FAT-fs (loop0): Can't find a valid FAT filesystem
[  244.385564][ T8673] netdevsim netdevsim1 netdevsim0: renamed from eth0
03:11:35 executing program 0:
r0 = socket$unix(0x1, 0x400040000000001, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00')
sendfile(r1, r2, 0x0, 0x800000bf)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, '%]##%#\xca!\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20044085)

[  244.456379][ T8673] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  244.508545][   T49] Bluetooth: hci0: command 0x0409 tx timeout
[  244.544290][ T8673] netdevsim netdevsim1 netdevsim2: renamed from eth2
03:11:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@local, 0x63, r6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2}]}}]}, 0x48}}, 0x0)
r7 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[  244.608645][ T8673] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  244.792050][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.838098][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.909833][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.942201][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  245.053234][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.079918][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  245.090005][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
03:11:35 executing program 0:
openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
write$6lowpan_control(r1, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1c)
syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="020185ffffff0a000000ff45ac0000ffffff8590663d280000000000000680ffffffbf000000e100e2ff877700720030070085ffffff00000000008000da55aa", 0x40, 0x5}])

[  245.112817][ T8673] 8021q: adding VLAN 0 to HW filter on device team0
[  245.162010][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  245.171982][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  245.181367][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.188796][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.239855][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  245.249835][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  245.259792][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  245.270281][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.277514][ T8846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.286886][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  245.343379][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  245.354576][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  245.364977][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  245.375365][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  245.386042][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  245.410024][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  245.419761][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  245.431152][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.441384][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  245.451311][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  245.466715][ T8673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  245.520596][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.528543][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  245.562316][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.625667][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  245.636212][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  245.756934][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.767386][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
03:11:36 executing program 0:
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x802, 0x10, 0x6}, 0x18)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4])
write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x3002, {0x4, 0x2}, 0x208, r2, r4, 0x452, 0x5, 0x9a400, 0x0, 0x1e3, 0x100000001, 0xea5, 0x9, 0x800, 0x5e, 0x81, 0x23fd4c20, 0x3ff, 0x1, 0x7184}}, 0xa0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "a600", 0x10, 0x21, 0x0, @empty={[0x3]}, @local, {[], {{0xfffc, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, "78966f", 0x0, ' V\r'}}}}}}}, 0x0)

[  245.807486][ T8673] device veth0_vlan entered promiscuous mode
[  245.827991][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.837676][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  245.875204][ T8673] device veth1_vlan entered promiscuous mode
[  245.963758][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  245.975470][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  245.984914][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.994916][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  246.017137][ T8673] device veth0_macvtap entered promiscuous mode
[  246.036806][ T8673] device veth1_macvtap entered promiscuous mode
[  246.072902][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  246.084006][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.097513][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.112438][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  246.122888][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  246.132309][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.142182][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.175546][ T8673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  246.186543][ T8673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.200650][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.211838][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.222290][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:11:36 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000))
sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x28, 0x29, 0x2, "2b07df2fd0806bc0964f4ffde3d917e314"}], 0x28}}], 0x1, 0x0)

03:11:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000045fb486de9538c706efd65f5b9452732b61d9414a5c258f9242bcc0c389e7e69a6e05ba4e3684cf054b4cead23a776a24aefb479602830e52ddcf2195ac13da61d863f0bc99cd7ed7c72b368fc50608e1fd2c922dde42d6c2fe9ebc8b6cb4b2e16179e1f325bfaaa3c226c5525454dfa886634cbdccf709d359cdf461089cba284f388"]})
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  246.590423][   T49] Bluetooth: hci0: command 0x041b tx timeout
[  248.314028][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.434425][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:11:39 executing program 1:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10040)
close(r0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000280)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)

03:11:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10300, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0xfffffffb, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x6, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0x9}]}], {0x14, 0x11, 0x2}}, 0x74}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3])
ioctl$TUNSETGROUP(r1, 0x400454ce, r3)
r4 = dup2(r0, r1)
ioctl$NBD_CLEAR_SOCK(r4, 0xab04)

[  248.670189][   T49] Bluetooth: hci0: command 0x040f tx timeout
03:11:39 executing program 0:
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3)
clone(0x90400, 0x0, 0x0, 0x0, 0x0)

03:11:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300100000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r9 = socket$kcm(0x10, 0x2, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r10, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffc1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48040}, 0x4805c)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0)

[  248.870242][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  248.934504][ T9026] IPVS: Error joining to the multicast group
03:11:39 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000000))
socket(0x10, 0x803, 0x0)
socket$inet(0x2, 0x80001, 0x0)
socket(0x11, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x78, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8243}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xae7c}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}}, 0x0)

[  249.396855][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:11:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'ip6_vti0\x00', 0x2}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffff81}, 0xc2014, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x162, &(0x7f00000001c0)=@abs, 0x6e)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
r3 = socket(0x200000000000011, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14)
getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000080)=0x14)
sendto$l2tp(r3, &(0x7f0000000240)="6c7830a4f46e50b51dcf916aca3ea7c5802c660e3409f74c6844320782dc96af6f1541e27429972c4f7060ba159a844e0a0ee43e5c419de690d1d7b7940879559bbdece0b2cfd64163779c288e745122e1d68e871419b68f3f9ab030b528f29b3db896555a40", 0x66, 0x40, &(0x7f0000000140)={0x2, 0x0, @local, 0x2}, 0x10)
prctl$PR_SET_PDEATHSIG(0x1, 0x2)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000300))
pipe(&(0x7f0000000040))
r6 = socket$alg(0x26, 0x5, 0x0)
accept4(r6, 0x0, 0x0, 0x0)

03:11:40 executing program 1:
socket$inet(0x10, 0x3, 0x0)

[  249.618331][ T9053] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 2, id = 0
[  249.662577][    C1] hrtimer: interrupt took 53937 ns
[  249.676649][ T9051] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[  249.686242][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  249.835353][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  249.921949][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  249.932760][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:11:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
setns(r0, 0x80)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x0)

[  250.228512][ T9064] SELinux:  Context system_u:object_r:systemd_systemctl_exec_t:s0 is not valid (left unmapped).
[  250.241196][   T33] audit: type=1400 audit(1596337900.790:10): avc:  denied  { mac_admin } for  pid=9062 comm="syz-executor.1" capability=33  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  250.399807][   T49] Bluetooth: hci1: command 0x0409 tx timeout
[  250.425591][ T9051] netlink: 'syz-executor.0': attribute type 27 has an invalid length.
[  250.434240][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  250.460821][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  250.477288][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.485271][ T9051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
03:11:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0004000020"], 0x6)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32)
recvmmsg(r1, &(0x7f0000007080)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, &(0x7f0000007180)=""/177, 0xb1}}, {{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000380)=""/10, 0xa}, {&(0x7f00000016c0)=""/135, 0x87}], 0x7, &(0x7f00000017c0)=""/8, 0x8}}, {{&(0x7f0000001800)=@ax25={{0x3, @default}, [@null, @null, @remote, @bcast, @null, @remote, @bcast, @null]}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)=""/198, 0xc6}, {&(0x7f0000001980)=""/248, 0xf8}, {&(0x7f0000001a80)=""/216, 0xd8}], 0x3, &(0x7f0000005d80)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000002bc0)=""/199, 0xc7}, {&(0x7f0000002cc0)=""/164, 0xa4}, {0x0}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/224, 0xe0}, {&(0x7f0000003f80)=""/242, 0xf2}, {&(0x7f0000004080)=""/100, 0x64}, {&(0x7f0000004100)=""/185, 0xb9}], 0x8, &(0x7f0000004200)=""/245, 0xf5}}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004380)=""/103, 0x67}, {&(0x7f0000004400)=""/207, 0xcf}, {&(0x7f0000004500)=""/41, 0x29}], 0x3, &(0x7f00000015c0)=""/195, 0xc3}}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000005680)=""/133, 0x85}, {0x0}, {&(0x7f0000005780)=""/227, 0xe3}], 0x3, &(0x7f00000058c0)=""/146, 0x92}}, {{0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000005a00)=""/71, 0x47}, {&(0x7f0000005a80)=""/198, 0xc6}, {&(0x7f0000005b80)=""/87, 0x57}, {&(0x7f0000005c00)=""/240, 0xf0}, {&(0x7f0000005d00)=""/70, 0x46}, {&(0x7f0000004680)=""/4096, 0x1000}, {0x0}], 0x7, &(0x7f0000006ec0)=""/138, 0x8a}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000007000)=""/43, 0x2b}], 0x1}}], 0x8, 0x66, &(0x7f00000001c0)={0x77359400})

[  250.763294][ T8846] Bluetooth: hci0: command 0x0419 tx timeout
03:11:41 executing program 1:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="000000fcbf2bdfec0b7edba4b615630000002000"])
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000180)={0x745, 0xfffffffd, 0x9, 0xc03, 0x3, 0x10000})

03:11:41 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r2 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil)
shmat(r2, &(0x7f0000001000/0x1000)=nil, 0x6000)
shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x2000)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x3c, r5, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}]}, 0x3c}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000080)={0x67, @broadcast, 0x4e24, 0x1, 'none\x00', 0x2, 0xfbc8, 0x15}, 0x2c)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0x8000, 0x4, 0x0, 0xff8, 0x0, 0x3})

03:11:41 executing program 1:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@typedef={0x3, 0x0, 0x0, 0x7}, @const={0xa, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x36, 0x8e, 0x8}, 0x20)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0xe55)
syz_open_procfs(r0, &(0x7f0000000000)='net/connector\x00')

03:11:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0xfd}, @IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x44}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0904e8007320"], 0x6)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xec}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x98}}, 0x8010)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
writev(r3, &(0x7f00000004c0)=[{&(0x7f00000002c0)="c24fb18dc114659c3aa4321c1ace372ae66aeb20dfc6ce56cd8ea6c899c701e76f10af893fcbd1418032e268670d0943f849d4e564ec862f1ce0ec65fcac47be3d33bfc20e1fe7fdec8667bb44b68a23724e8e6ef66612d1e28c61d982c8738d5baaf1ca510bf441db144f31ff286a0b9f284013afe029d5131bab2b9e31502d6ef7af823d6cfc4e7e34ae315a91e7535252a3ffc8dcb1c986494fb16f5fe0b3b2f8e97014831ea97a5ced4cdb122145fa5ea0cf6b246e22af484c7f70f8049a4c591a396e13dd99c088371961bb4bf9342075195bf9c00e82d5f64fd4b91e9578f227dbb3bb91902a32c2a5d53f145350fb44387a", 0xf5}, {&(0x7f00000003c0)="d7daae61a41b43773706aa447dae596ce3a18e3e8255fbadd5d76acc5e062f6d99eff3b55b151692248ce1c956cbd9a45944c5a5a67ee5c33b147130ace4c602e030d41d9a0bfcc5038a7d1d1d17651dfcb0a28cd1005318e7c0fac9a6530b0eea4fbb3fd3ab62d4da4da65775a139c73e34bd794a225ac7633a111b4bf0cb7b37ba2ffbd26e222f69d2262ca62288a276fb63660b9e8fe995aa5bc9e284033c83f4c51223f4d04ae97862251405bbc0f851332ab979a3efb01940dbec3c37edf152ad62343adc8358bc9636fdcdefdf033a67", 0xd3}], 0x2)

[  251.267816][ T9097] BPF:[1] FWD  
[  251.272027][ T9097] BPF:struct
[  251.275267][ T9097] BPF: 
[  251.278078][ T9097] BPF:Invalid name
[  251.282246][ T9097] BPF:
[  251.282246][ T9097] 
[  251.331681][ T9097] BPF:[1] FWD  
[  251.335413][ T9097] BPF:struct
[  251.339724][ T9097] BPF: 
[  251.342761][ T9097] BPF:Invalid name
[  251.346560][ T9097] BPF:
[  251.346560][ T9097] 
03:11:42 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = openat$bsg(0xffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffff866)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000bc82ab463aa95d9d0f6fb4f3a6d5b705b75d2e69776042ad48c1ff5d7025f3f29b78cd751c1b79cf5b62cf6554b96e230d2d9eaf2f0ba29e", @ANYRES16=0x0, @ANYBLOB="00000000000000000000150000001400038008000300986a00000800020000000000140007cf8bbbe700000000000800020004"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff000000000008001f00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8d226806931c48f594d8bbc53422c223b998ff840d88e180bcea346473fcc3bff91b85d2e847692af93742e56835f13e8076d3055edd3a"], 0x6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="6400f871c8f596e0f34dc1fadd2978a4406e", @ANYRES16=r6, @ANYRES16=r7], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0x2d, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x11e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r6, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x80)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r4}}, 0x20}}, 0x0)

03:11:42 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67)
r2 = socket$packet(0x11, 0x3, 0x300)
poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100)
r3 = dup2(r1, r2)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
ioctl$VT_DISALLOCATE(r3, 0x5608)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x2, @loopback}, 0xfffffffffffffe10)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000))
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[  251.866224][ T9121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=9121 comm=syz-executor.1
[  252.332893][ T9116] team0: Port device team_slave_1 removed
03:11:42 executing program 2:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000000)={0x6aa7, 0x6, 0x4, 0x4000, 0xfffffbff, {0x0, 0xea60}, {0x1, 0x8, 0x4, 0x6, 0x0, 0x0, "268207ce"}, 0x80, 0x3, @userptr=0x1, 0xfffffff8, 0x0, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="5410722320bcb41fc4191e2c06", 0xd, 0x20000000, &(0x7f0000000100)={0x11, 0x4, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14)
r1 = dup3(r0, r0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000140)={0x0, 0x5, 0x5})
fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "562feeeb08ea12aeb66fd08e0a111596"}, 0x11, 0x1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000540)={0x7, 'ip_vti0\x00', {0x5}, 0x79})
r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40246608, &(0x7f00000005c0)={0x0, 0x400, 0x1, 0xffffffffffff8000, 0x3, 0xfff})
r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000600)='/dev/dlm-control\x00', 0x8000, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4)
r5 = creat(&(0x7f0000000640)='./file0\x00', 0x4)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000680)={0x2, <r6=>0xffffffffffffffff, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000006c0)={0x20000004})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740)='mptcp_pm\x00')
accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={<r9=>0x0, @private, @initdev}, &(0x7f0000000840)=0xc)
accept4$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000008c0)=0x14, 0x80000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xfc, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)

[  252.429866][ T8846] Bluetooth: hci1: command 0x041b tx timeout
[  252.522444][ T9121] bond1: (slave veth3): Enslaving as an active interface with an up link
[  252.569154][ T9116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=9116 comm=syz-executor.1
03:11:43 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$KDENABIO(r4, 0x4b36)
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendto(r3, &(0x7f0000000200)="eb4d7c410c897d0e302116071428f58c82b8366fbc913ad2ef02b262427bbd10f8878dfb8cc1296a59e77e121e698412475349505c8126d420dad6728d8dfcd7c3d71cfb40f3476e4045c361719a299452bb8ae0c2c9122ffce7b00943afd7a9e3649b32892e7eaa6d04ef095c01001d636de4f1af732712171b642d55be800777b79871", 0x84, 0x20000010, &(0x7f0000000140)=@llc={0x1a, 0x205, 0x8, 0xff, 0x8, 0x9, @link_local}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000800010070696500140002000800020000000000085e96e2bfffffff"], 0x40}}, 0x0)

03:11:43 executing program 1:
r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x120, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0xdb25ad9bcbad9a6f)
r1 = memfd_create(&(0x7f0000000100)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x13\x02\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1s\xeb\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\f7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x9e\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J', 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, [0x200, 0x8001, 0x3, 0x101]})
dup(r2)
fcntl$setlease(r0, 0x400, 0x0)
ftruncate(r1, 0x40003)
sched_setscheduler(0x0, 0x5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7098153ce4d0ca5a3d0b9ebc29e63f164d5e53845e2693fb1f85c70653ff8fe0f519fe549963bf77369ce5"], 0x6)
faccessat(r3, &(0x7f0000000080)='./bus\x00', 0x1)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
keyctl$setperm(0x5, 0x0, 0x300e2c11)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x102, 0x13, 0x1}, 0x18)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000300)={0x6, 0x17c6fcda3a8ed89f, 0x5, {0x4, 0xbfd00000, 0x1ff, 0x8}})
ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4000fff})
sendfile(r4, r1, 0x0, 0xffffff10)

[  252.900932][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.021911][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
03:11:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xfe00000000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3fae}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x17}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x402c010}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2d7069150c20"], 0x6)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06464b8, &(0x7f0000000000)={0x9, 0x3, 0x80, 0x5, 0x2, [0x80, 0x8, 0x7fff, 0x24000], [0x2, 0x0, 0x7, 0xfc], [0x2, 0x8, 0x80, 0x7ff], [0x3, 0x0, 0x7, 0xfffffffffffffff8]})

[  253.576872][   T33] audit: type=1800 audit(1596337904.140:11): pid=9186 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15751 res=0
03:11:44 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82)
sendfile(r1, r0, 0x0, 0xa198)
tkill(0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000001580)=ANY=[], 0x119)
sendfile(r3, r2, 0x0, 0xa198)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f0000000000)={0xd6, &(0x7f0000000080)="8210807e2ec7c4109f456b520b61e8187c79b29b6deea34b89a9ef6ed654fec127984a0e408767ee23adb95a632fee8b0cb45ab215014dd180d51b9ea7f15c96ce7c4c0edd4a27308a7e3d281d282880e07df994c82d6b984507cca40fc709130102d1a42677285184f43728870a9d13f8d750fe8abe05b51bf404d8b7f5fdd1725d9cc0a0f0e99b02e18a3abbe975ceeb58fcb8a8de63749c734868ab2f89f949c969d60773abf7cf552e99d141753c0c7f3943d050fe276c8cf9a49769408b354b821d28aedeb0859f3390686eec9c56bedba5ba95"})

[  253.753983][ T9192] IPVS: ftp: loaded support on port[0] = 21
[  253.826850][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.896330][   T33] audit: type=1804 audit(1596337904.460:12): pid=9215 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
[  253.947821][   T33] audit: type=1804 audit(1596337904.490:13): pid=9215 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
03:11:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000100)=""/169)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  254.475443][ T9192] chnl_net:caif_netlink_parms(): no params data found
[  254.520124][ T8846] Bluetooth: hci1: command 0x040f tx timeout
[  254.566226][   T33] audit: type=1804 audit(1596337905.130:14): pid=9226 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
[  254.639958][   T33] audit: type=1804 audit(1596337905.180:15): pid=9326 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
03:11:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
r2 = gettid()
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x3c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}]}, 0x3c}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x608100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69110a3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x9}}}}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc2c5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x57}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb7e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fea859c92dbc3bb18dc0eea14a48228dc382b547f96b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x40000}, 0x4844)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {0x25, 0x0, 0x6c}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  254.709497][ T9215] syz-executor.1 (9215) used greatest stack depth: 3552 bytes left
03:11:45 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82)
sendfile(r1, r0, 0x0, 0xa198)
tkill(0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000001580)=ANY=[], 0x119)
sendfile(r3, r2, 0x0, 0xa198)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f0000000000)={0xd6, &(0x7f0000000080)="8210807e2ec7c4109f456b520b61e8187c79b29b6deea34b89a9ef6ed654fec127984a0e408767ee23adb95a632fee8b0cb45ab215014dd180d51b9ea7f15c96ce7c4c0edd4a27308a7e3d281d282880e07df994c82d6b984507cca40fc709130102d1a42677285184f43728870a9d13f8d750fe8abe05b51bf404d8b7f5fdd1725d9cc0a0f0e99b02e18a3abbe975ceeb58fcb8a8de63749c734868ab2f89f949c969d60773abf7cf552e99d141753c0c7f3943d050fe276c8cf9a49769408b354b821d28aedeb0859f3390686eec9c56bedba5ba95"})

[  254.859512][   T33] audit: type=1804 audit(1596337905.240:16): pid=9327 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
[  254.884573][   T33] audit: type=1804 audit(1596337905.240:17): pid=9226 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/10/file0" dev="sda1" ino=15751 res=1
[  254.948275][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.956292][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.965985][ T9192] device bridge_slave_0 entered promiscuous mode
[  255.112365][   T33] audit: type=1804 audit(1596337905.610:18): pid=9347 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/11/file0" dev="sda1" ino=15755 res=1
[  255.138074][   T33] audit: type=1804 audit(1596337905.610:19): pid=9347 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/11/file0" dev="sda1" ino=15755 res=1
[  255.415599][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.423312][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.432660][ T9192] device bridge_slave_1 entered promiscuous mode
[  255.702424][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.735050][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
03:11:46 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x82)
sendfile(r1, r0, 0x0, 0xa198)
tkill(0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000001580)=ANY=[], 0x119)
sendfile(r3, r2, 0x0, 0xa198)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40086410, &(0x7f0000000000)={0xd6, &(0x7f0000000080)="8210807e2ec7c4109f456b520b61e8187c79b29b6deea34b89a9ef6ed654fec127984a0e408767ee23adb95a632fee8b0cb45ab215014dd180d51b9ea7f15c96ce7c4c0edd4a27308a7e3d281d282880e07df994c82d6b984507cca40fc709130102d1a42677285184f43728870a9d13f8d750fe8abe05b51bf404d8b7f5fdd1725d9cc0a0f0e99b02e18a3abbe975ceeb58fcb8a8de63749c734868ab2f89f949c969d60773abf7cf552e99d141753c0c7f3943d050fe276c8cf9a49769408b354b821d28aedeb0859f3390686eec9c56bedba5ba95"})

[  256.182648][ T9192] team0: Port device team_slave_0 added
[  256.196872][   T33] audit: type=1804 audit(1596337906.760:20): pid=9383 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/12/file0" dev="sda1" ino=15756 res=1
[  256.222339][   T33] audit: type=1804 audit(1596337906.770:21): pid=9383 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir774235401/syzkaller.r3XI0O/12/file0" dev="sda1" ino=15756 res=1
[  256.267875][ T9192] team0: Port device team_slave_1 added
[  256.478371][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.485728][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.512679][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.589676][ T8846] Bluetooth: hci1: command 0x0419 tx timeout
[  256.632670][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.640123][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.666798][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
03:11:47 executing program 0:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@random, @dev, @void, {@generic={0x8864}}}, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="37bad71ce4bfd9abb34c294c0578962c89ec0cdb09d146c9dd85590523643395c22a1e1316e20a85c37876cfe4a54665f64515652474b3d0a803bc5b3c6f6dd225c480b2cc1eafdee50945bb8a3b", 0x4e}, {&(0x7f0000000240)="0198da1b45a44c6356e8f1b9793e5902eb6f4155c26d403097de70df8532d9e43cea581318362ddde7905e74bef54d4ad28944dc43949352ce48962dd872e259ca48d3919b139ee7bbeb1d7fdb25ede6f6f5f071d7295e7d5f31921562a244026d26f3cc1bc7f211fbd4e666ce7119ef82dd54b8eb0fa5e725bceaa1bf0dd08e3ce49661211570e77090ea5f05751c7187012dfe9e61ac8a5849dc3c258bbc30ec80ba8165b0d4f253a9", 0xaa}, {&(0x7f0000000180)="c288f6df63ca7a335d6da748eec2d742efe26afd933336a9a25128c646ee88b3829d834fa6f65e81cd7a1f2a52c5db4a0ab9fbb1ffc4882135f631c1471d6f746c543b3b11ac86440047", 0x4a}], 0x3, 0x0)
r3 = socket(0x1e, 0x3, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'sit0\x00', <r4=>0x0, 0x2f, 0x7, 0x81, 0x0, 0x3, @remote, @dev={0xfe, 0x80, [], 0x27}, 0x1, 0x81, 0x80, 0x81}})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010e404ff000000000000000000b502e4e2c31fe9be85b0420a1b23c9dd1e7f5ca14b16cb8006482241fc06866ceb222bd67f370cae8ff881f4ea511bada75ce459d73d83bbe706033edfe14b36f08241c7f928bbce5801e7f4c72ebb008a60c6b122b959d52cadb4592c93debd1e255758c29f746916a8da0ee2e2e64784714682019f062affa5455b22ddf60d3404d1fa89d15b27cf00"/170, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000002c24270d000000000000000000000000d168819bfd00"/40, @ANYRES32=r7, @ANYBLOB="0000000000000000040000000b000100666c6f7765720000140002000600080088a800000600190088a80000"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  257.095787][ T9192] device hsr_slave_0 entered promiscuous mode
[  257.150377][ T9192] device hsr_slave_1 entered promiscuous mode
[  257.189785][ T9192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.198470][ T9192] Cannot create hsr debugfs directory
03:11:47 executing program 1:
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x6)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)=']&^\\!\x00', 0x6)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
sendfile(r1, r2, 0x0, 0x320c)

[  257.221532][ T9415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=9415 comm=syz-executor.0
03:11:48 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040)=0x7, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000fff9)
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffffa5000000e100e2ff8777007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}])

[  257.726915][ T9192] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  257.782245][ T9192] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  257.833774][ T9192] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  257.929894][ T9192] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  257.938813][ T9468] SELinux:  Context G0: system timer : 10000.000us (10000000 ticks)
[  257.938813][ T9468] G3: HR timer : 0.001us (1000000000 ticks)
[  257.938813][ T9468] P0-0-0: PCM playback 0-0-0 : SLAVE
[  257.938813][ T9468] P0-0-1: PCM capture 0-0-1 : SLAVE
[  257.938813][ T9468] P0-0-2: PCM playback 0-0-2 : SLAVE
[  257.938813][ T9468] P0-0-3: PCM capture 0-0-3 : SLAVE
[  257.938813][ T9468] P0-0-4: PCM playback 0-0-4 : SLAVE
[  257.938813][ T9468] P0-0-5: PCM capture 0-0-5 : SLAVE
[  257.938813][ T9468] P0-0-6: PCM playback 0-0-6 : SLAVE
[  257.938813][ T9468] P0-0-7: PCM capture 0-0-7 : SLAVE
[  257.938813][ T9468] P0-0-8: PCM playback 0-0-8 : SLAVE
[  257.938813][ T9468] P0-0-9: PCM capture 0-0-9 : SLAVE
[  257.938813][ T9468] P0-0-10: PCM playback 0-0-10 : SLAVE
[  257.938813][ T9468] P0-0-11: PCM capture 0-0-11 : SLAVE
[  257.938813][ T9468] P0-0-12: PCM playback 0-0-12 : SLAVE
[  257.938813][ T9468] P0-0-13: PCM capture 0-0-13 : SLAVE
[  258.009832][ T9468]  loop1: p1 p2 p3 p4
[  258.101575][ T9468] loop1: partition table partially beyond EOD, truncated
[  258.109401][ T9468] loop1: p1 start 10 is beyond EOD, truncated
[  258.115647][ T9468] loop1: p2 start 25 is beyond EOD, truncated
[  258.121938][ T9468] loop1: p3 start 4293001441 is beyond EOD, truncated
[  258.128865][ T9468] loop1: p4 size 3657465856 extends beyond EOD, truncated
[  258.470672][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.527099][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  258.536688][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  258.558959][ T9192] 8021q: adding VLAN 0 to HW filter on device team0
[  258.587619][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  258.597707][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  258.607986][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.616094][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.691914][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  258.702144][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  258.713020][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  258.723089][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.730738][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.739851][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  258.830627][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  258.841737][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  258.852348][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  258.862560][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  258.873487][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  258.883536][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  258.893615][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.904320][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.914201][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.926959][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.945808][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  258.999001][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.007450][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.033857][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.091880][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.102145][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.152055][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  259.161757][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  259.176884][ T9192] device veth0_vlan entered promiscuous mode
[  259.187758][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.197558][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.221954][ T9192] device veth1_vlan entered promiscuous mode
[  259.282995][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  259.292583][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  259.302162][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  259.312590][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  259.332523][ T9192] device veth0_macvtap entered promiscuous mode
[  259.348328][ T9192] device veth1_macvtap entered promiscuous mode
[  259.383932][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  259.396245][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.406788][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  259.417495][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.432064][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.440416][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  259.450050][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  259.459820][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.470126][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.526090][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  259.537017][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.547855][ T9192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  259.558570][ T9192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.572832][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.586867][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.597080][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:11:52 executing program 2:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000001fee)='R\a\x00\x00\x00t\xe3cus%R\xb2\x03x:De', 0xfffffffffffffffe)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x2, 0xffffffff, 0x0, 0x8, 0x1ff, 0x8})

03:11:52 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f00000003c0)='./bus\x00', 0x0)

03:11:52 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040)=0x7, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000fff9)
syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffffa5000000e100e2ff8777007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}])

[  261.662135][ T9518]  loop1: p1 p2 p3 p4
[  261.666793][ T9518] loop1: partition table partially beyond EOD, truncated
[  261.676450][ T9518] loop1: p1 start 10 is beyond EOD, truncated
[  261.684015][ T9518] loop1: p2 start 25 is beyond EOD, truncated
[  261.691112][ T9518] loop1: p3 start 4293001441 is beyond EOD, truncated
[  261.698211][ T9518] loop1: p4 size 3657465856 extends beyond EOD, truncated
03:11:52 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xac, 0x2, 0x4, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x201}, 0x14}}, 0x0)

03:11:52 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x40, @mcast2, 0x8000000, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7b, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:11:52 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2c080}, 0x4000000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x80003, 0x0)
r7 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400, 0x0)
ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000280)={0x5, 0x1})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = getpid()
r10 = syz_open_procfs(r9, &(0x7f00000003c0)='net/rt_acct\x00')
write$cgroup_subtree(r10, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4010, r10, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010427bd70000000000000000000", @ANYRES32=r8, @ANYBLOB="000000000700000000f3ffff0a0001006970766c656e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="fd3ceb944cc2445733a45975a3189cefb3af48454ab4c5094b995342852491a10988e1b6fcb0a1f7eaa1b7d80e8e5db6ec16346da39a0a1c21c68310ac2d5e8d48cc9c22a1239aee7949ce9ea98da82b8b8ebd260f3da9f457781adc852e2ad03f7d9c8c3232636bf4d6939d2232b97e029d8bceabf8caa21e72b497c83df556e99139dec13e2bf297dc9ff578d94e70f7d6b6d2e76e100a64b5d04c343a2264a5a88b9a71637353a46432765e874676cb4f7968fa562e241cb7754018209568cdd5ace059363fb6918098971a499301c06ae043fb404cf0f208ed9a2af2bcfa575134a1"], 0x44}}, 0x0)

[  261.984659][ T9536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=9536 comm=syz-executor.0
03:11:52 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000040)=""/34)
dup3(r1, r0, 0x0)

[  262.243107][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:11:52 executing program 1:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x8c800)
connect$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10)

[  262.334404][ T9545] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  262.371012][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:11:53 executing program 2:
r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181000, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
syz_read_part_table(0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000080)="030005000314af0003140000000000ffffff820000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {0x0, 0x0, 0x8000}])

03:11:53 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
openat$vimc2(0xffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)='!/(\\@\xb2(\x00', 0xfffffffffffffffb)
keyctl$get_security(0x11, r1, &(0x7f0000000280)=""/19, 0x13)
chmod(&(0x7f0000000000)='./file0\x00', 0x80)
umount2(&(0x7f0000000080)='./file0\x00', 0x3)

[  262.774552][   T33] audit: type=1800 audit(1596337913.339:22): pid=9558 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=15770 res=0
[  262.804788][ T9565] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  262.815509][ T9565] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  262.823444][ T9565]  loop2: p2
[  262.827279][ T9565] loop2: p2 size 327680 extends beyond EOD, truncated
[  262.856163][ T9572] fuse: Bad value for 'fd'
03:11:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000000000ecff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x1}]}}]}, 0x38}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={[{@uni_xlateno='uni_xlate=0'}, {@rodir='rodir'}]})
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[  263.003957][ T9578] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  263.014332][ T9578] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  263.021874][ T9578]  loop2: p2
[  263.025762][ T9578] loop2: p2 size 327680 extends beyond EOD, truncated
[  263.086538][ T9583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9583 comm=syz-executor.0
03:11:53 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, 'memory'}]}, 0x61)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xa)

[  263.130081][ T9583] FAT-fs (loop0): bogus number of reserved sectors
[  263.136786][ T9583] FAT-fs (loop0): Can't find a valid FAT filesystem
[  263.151956][   T17] Bluetooth: hci2: command 0x0409 tx timeout
[  263.222918][ T9588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9588 comm=syz-executor.0
[  263.267347][ T9588] FAT-fs (loop0): bogus number of reserved sectors
[  263.274277][ T9588] FAT-fs (loop0): Can't find a valid FAT filesystem
03:11:53 executing program 2:
syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500007800010000002f907800000000e00000010000810000649078020000000000000088a8ff7f4acdbf0522fd6a5d805f1e4b834dfb00ea002857819706542175027b75617fc53da9874f30c6f9e582c60e20a3d14f7da59ddfa0f017f669df95d97b19269e08479073564b7cd535802e40187fe308c3"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$TIOCCBRK(r0, 0x5428)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x5)

03:11:54 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0)
listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/16, 0x10)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x4000051, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a459830a1e94740e06d94342c64dd8165ebea25878b8a8d8d560890b8f323579e28943ebc6c05f442ec8a87ac9479f21dba1dfc2c5bf29233b4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709cb095ca2295ab04c98a96c6ab88116842ce7f64cc68c1c850bf36d21206e83882c22c3cdf321ffbafe3a67796c702fc0d980d60de8d38e3bd5de1bb16ef821f804f87e483ef21e95586e80e8956c4f6d0dcc639a80c9470e14ba3c03d2df0af71cd833ae42eff3fcd234da2efd65ef3eebe39bd95042d7471b08db1094c6acc6f7b0a7b6380edc2fc4c7466d26bfb8a72d5c08b429bc3edb2c63388a5c50e60d969ad48e68702eabe4ff1f239fbebc3a40e489b48997fe0fa7c35b982b8d68e7cb0df0a6abb8aabebad84807066ad00b68ac1b351c03eb136f9e7948b9dcae72144fc0fd9c2ff7af5d7347d204a3fa288a7d94d0a9adba9138d2c66ac0da0a56d3b6ba374a5b16062534658a3704fad9d5c5b966fd8e36e418846"], 0x100)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0x0, <r1=>0x0})
sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r4 = accept4$netrom(r3, &(0x7f0000000500)={{0x3, @rose}, [@remote, @remote, @netrom, @default, @rose, @null, @null, @bcast]}, &(0x7f0000000280)=0x48, 0x0)
accept4$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@remote, @rose, @rose, @netrom, @null, @remote, @remote, @netrom]}, &(0x7f0000000200)=0x48, 0x100000)

03:11:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x120}}, 0x20}, 0x1, 0x0, 0x0, 0x402c010}, 0x4000010)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000280)=0x44)
sendto$unix(r1, &(0x7f0000000040)="b48bcc0cfa5bdd5ed2f3265548d217cb8419e662948c0473a32361893bb8d83f278a465875636347978abd33c88daa972492142e6d115652eea30b61f25431dc2a5ac054", 0x44, 0x40040, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write$binfmt_elf32(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xc0, 0x8, 0x2, 0x3, 0x2, 0x3e, 0x8, 0x22a, 0x34, 0x273, 0x8, 0xe, 0x20, 0x1, 0x1, 0x4}, [{0x70000000, 0x2, 0x1, 0xc7, 0x7ff, 0x7, 0x1fc000, 0x7}, {0x60000000, 0x7fff, 0x80, 0x2, 0x8000, 0x8b13, 0x7fffffff, 0x6}], "40c99168ca8f507f3a29b4cb325cc350875a45cd2e9f88723d960c848f05183b113b46b0a5eb672edb1e899440f063a42b3f2095df36d24a87222697a3722a23af5d7f158e039fd878542ece7f34161c20f893f1d133ed0d39a9c8e97bc96de8642d674409b0c4930bf72c18c8c9c17f48923b61b5a5d2aaae522c8cd591451a8d92c4b3bab30fabebcb31", [[], [], [], [], [], [], [], []]}, 0x8ff)

03:11:54 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x40010, r2, 0x0)
ftruncate(r1, 0x40)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000180))

03:11:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8800"/20, @ANYRES32=0x0, @ANYBLOB="dd0c32b7000000fc08000a00", @ANYRES32=0x6, @ANYBLOB="600012000c000100697036746e6c00005000020014000300f7d10000008e258a74000000000000010800080039003a0014000200ff"], 0x88}}, 0x0)

[  263.965772][ T9616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9616 comm=syz-executor.0
03:11:54 executing program 2:
open(&(0x7f00000002c0)='./file0\x00', 0xe8142, 0x4)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x0, r1)
pipe(&(0x7f0000000100))
socket(0x1, 0x803, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000280))
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

03:11:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

03:11:55 executing program 0:
socket$caif_seqpacket(0x25, 0x5, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0xf, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="995f275820"], 0x6)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x74)

03:11:55 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)=ANY=[@ANYBLOB='tz=UTC,umask=0', @ANYRESOCT])

03:11:55 executing program 3:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r1=>0x0, 0x4, 0x7f, 0x8, 0x9, 0x0, @loopback, @ipv4={[], [], @rand_addr=0x64010100}, 0x1, 0x700, 0xffff, 0x35a}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x79da}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f00000002c0)={&(0x7f0000000280), 0x0, 0x81})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)=""/49, 0x9e})
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000380)={0xf8, 0x20})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x4, 0x55e, 0x7, 0x1, 0xd7}, &(0x7f0000000400)=0x14)
r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x400000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl0\x00', <r6=>0x0, 0x2b, 0x2, 0x5, 0x8, 0x74, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @private=0xa010102}, 0x80, 0x8000, 0x2, 0x8001}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', <r7=>r1, 0x4, 0xff, 0x2, 0x7, 0x5, @local, @empty, 0x8, 0x20, 0x5, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip6gre0\x00', <r8=>r1, 0x3d, 0x1, 0x7, 0x0, 0x24, @dev={0xfe, 0x80, [], 0x33}, @private0, 0x7800, 0x7, 0xfe4e, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001f40)={'batadv0\x00', <r9=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001f80)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4}}, &(0x7f0000002080)=0xe4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002140)={'syztnl2\x00', &(0x7f00000020c0)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0x1f, 0x20, 0x0, 0x7, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8000, 0x0, 0x7}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000002300)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x114, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004004}, 0x80)
r12 = openat$bsg(0xffffff9c, &(0x7f0000002340)='/dev/bsg\x00', 0x101000, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, &(0x7f0000002380)={'ah\x00'}, &(0x7f00000023c0)=0x1e)

03:11:55 executing program 2:
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x2c)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000340))
pipe(&(0x7f0000000100))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000300)={0xa, &(0x7f0000000380)=[{0x4, 0x80, 0xfb, 0x7fffffff}, {0x5, 0x1c, 0x0, 0x10000}, {0x2, 0x0, 0x20, 0x7fffffff}, {0xfe00, 0x3e, 0xff, 0x7fffffff}, {0x1f, 0x4, 0x5, 0x6}, {0x1f, 0x5, 0x4, 0x1}, {0xfffc, 0xb8, 0x81, 0x1}, {0x5, 0x40, 0x1, 0x4}, {0x62ca, 0x0, 0x9, 0x3}, {0xfffd, 0x3, 0x8, 0x8}]})
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'pids'}, @NFTA_COMPAT_NAME={0x8, 0x1, '#/}\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000080)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x75747, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendmsg$nl_generic(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0x18}, [@typed={0x4, 0x79}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x24048810)

03:11:55 executing program 0:
clone(0x40041be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0))
ptrace(0x4206, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x1, 0x1}, &(0x7f0000000540)=[{}])

[  265.231902][   T17] Bluetooth: hci2: command 0x041b tx timeout
[  265.237777][ T9647] device syz_tun entered promiscuous mode
[  265.298093][ T9647] device syz_tun left promiscuous mode
03:11:56 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0)
memfd_create(&(0x7f0000000040)='/n\xcb2\x88\x1d\xf9\xff\xe7\xdc[\x17\x8b\xb2\xf7W\xf0\x06\x00\x00@\xc8k\xc0\xa5veli', 0x0)
r3 = socket(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xce, 0x0, <r4=>0x0, 0x0, &(0x7f0000000340)={0x5, 0x5}, 0x0, 0x0, &(0x7f0000000100)={0x3, 0xe, 0x6, 0x833}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, r4}, 0x8)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000100))

[  265.707448][ T9654] IPVS: ftp: loaded support on port[0] = 21
03:11:56 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x7ff}, 0x8)
close(r0)
r5 = socket$inet(0x2, 0x1000000000000003, 0x29)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000180)={0x6, 'syzkaller0\x00', {0x1f}, 0x1})
r7 = socket$inet(0x2, 0x3, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local, 0x0, 0x1, [@local]}, 0x14)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0)

03:11:56 executing program 1:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="67d3a2"], 0x3)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2, 0x4}, 0x0, 0x80000b, 0xffffffffffffffff, 0x0)

03:11:56 executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x5c)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1)
openat$snapshot(0xffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)

03:11:57 executing program 1:
socket$kcm(0xa, 0x5, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000400)}, 0xc054)

[  266.641980][ T9654] chnl_net:caif_netlink_parms(): no params data found
[  267.113714][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.122846][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.132793][ T9654] device bridge_slave_0 entered promiscuous mode
[  267.171146][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.178495][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.188480][ T9654] device bridge_slave_1 entered promiscuous mode
03:11:57 executing program 1:
clone(0x200038447fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$full(0xffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x284100, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="0d9a4682", @ANYRES16=r5, @ANYBLOB="210800000000000000001f000000"], 0x14}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x94, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "9bc95e05f57198"}, @NL80211_KEY_SEQ={0xa, 0x4, "bdac5c728f08"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e3e5047987"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a5dec31a50c52158318dfb2353"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x11, 0x4, "7789236651fd7978dd19d51c6f"}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "4080c0bb9c74"}]}, 0x94}, 0x1, 0x0, 0x0, 0x44040}, 0x14)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  267.287553][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.310240][   T17] Bluetooth: hci2: command 0x040f tx timeout
[  267.335209][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.384091][ T9654] team0: Port device team_slave_0 added
[  267.396946][ T9654] team0: Port device team_slave_1 added
[  267.513175][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.520418][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.546963][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.722393][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.730577][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.757418][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.887512][ T9654] device hsr_slave_0 entered promiscuous mode
[  267.920924][ T9654] device hsr_slave_1 entered promiscuous mode
03:11:58 executing program 0:
set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2e7069b55f8a3ff909000000000000000053f3"], 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x71adc3c56c3294c5, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="45a69109732000"], 0x6)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7f327d22c5e8e4a8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="680062ba", @ANYRES16=r4, @ANYRESDEC], 0x68}, 0x1, 0x0, 0x0, 0x85}, 0x40c4)

[  267.980305][ T9654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.988032][ T9654] Cannot create hsr debugfs directory
[  268.125731][ T9862] IPVS: ftp: loaded support on port[0] = 21
[  268.352972][ T9868] IPVS: ftp: loaded support on port[0] = 21
03:11:59 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x2, 0x0, 0x2812, r0, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x89)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0)
r2 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0xd747, 0x0, 0x0, 0x389}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140))
fremovexattr(r2, &(0x7f0000000180)=@known='trusted.overlay.upper\x00')

[  268.845109][ T9654] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  268.855019][ T1453] tipc: TX() has been purged, node left!
[  268.948337][ T9654] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  269.021784][ T9654] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  269.107640][ T9654] netdevsim netdevsim3 netdevsim3: renamed from eth3
03:11:59 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
recvmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002580)=""/102400, 0x19000}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000340)=""/81, 0x51}], 0x5, &(0x7f0000000400)=""/44, 0x2c}, 0x40010020)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
clock_gettime(0x0, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x3f, @private2, 0x40}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x3c)
prctl$PR_GET_SECCOMP(0x15)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r4, &(0x7f0000002340)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)

[  269.331823][ T9959] ptrace attach of "/root/syz-executor.0"[8451] was attempted by "/root/syz-executor.0"[9959]
[  269.390979][   T49] Bluetooth: hci2: command 0x0419 tx timeout
[  269.657824][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.735353][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  269.751705][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  269.781794][ T9654] 8021q: adding VLAN 0 to HW filter on device team0
[  269.817262][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  269.831417][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  269.842647][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.850603][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.940282][ T9654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  269.955309][ T9654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.976575][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  269.987498][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  270.000900][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  270.013300][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.023156][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.033206][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  270.044710][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.056890][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  270.067954][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  270.078910][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.091477][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  270.105324][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  270.117092][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  270.128062][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.139146][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.195880][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.207085][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  270.250829][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  270.263706][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  270.306520][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.429725][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  270.441097][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  270.522827][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  270.536799][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  270.567051][ T9654] device veth0_vlan entered promiscuous mode
[  270.604401][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  270.615233][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  270.654284][ T9654] device veth1_vlan entered promiscuous mode
[  270.761949][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  270.780885][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  270.793363][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  270.810873][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  270.846525][ T9654] device veth0_macvtap entered promiscuous mode
[  270.898076][ T9654] device veth1_macvtap entered promiscuous mode
[  270.987994][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  271.000120][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.010686][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  271.022281][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.032912][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  271.043965][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.058480][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.070454][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  271.081476][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  271.091368][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  271.101991][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  271.256773][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  271.279531][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.293135][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  271.304915][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.316174][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  271.328479][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.343880][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.355118][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  271.365968][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:12:04 executing program 3:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x4, &(0x7f0000000200))
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002040)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
io_setup(0x8000, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2}])
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x166142, 0x0)
ftruncate(r5, 0x200004)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1a, 0x30, r6, 0xf8607000)
sendfile(r4, r5, 0x0, 0x80001d00c0d0)

03:12:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x141102, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0099b9342a7818cc39662d002abf817670f08684dd060434461b6d47346a186fd1b4e4e6628a205f0aeea458b6bc14a8a239c614b92024b78af03c18f569e854b1ff"], 0x74, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001380))
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x39400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x800)
io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "31c5fe26bdb4b300c4e9934a85f732870ad158fe3da4a771d9417930619a8f2dc159b4db22b4ce72d1661f527b603a4ea9f12f74662a05bae5bda5d09693f30aee51451eacc85304efae496b2aff5258"}, 0xd8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000007bd3caf63f1546d42d59f6d4356366972832af445f149964fe853b1d3d09eabdac973020ab39a6"], &(0x7f0000000040)=0x42)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0x20002084)

03:12:04 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='-pidw '], 0x6)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000000c0)={0x9c0000, 0x2, 0x5, <r2=>r1, 0x0, &(0x7f0000000040)={0x9c0903, 0x8, [], @value=0x800}})
mq_timedsend(r2, &(0x7f0000000100), 0x0, 0xffff8001, &(0x7f0000000140)={0x77359400})
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x140, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x972d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62394eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c59c968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cf}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb87cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34679816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2007}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f6cb5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0541d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39075d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x546dcc37}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a2ea6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5782d45f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354dd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83c0d4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddffda1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d2dd68}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x332ea964}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4eda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeadc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38b086eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20d9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75d53271}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x276f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11483a2b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x20000040)

03:12:04 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2d7069647381"], 0x6)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200440c5}, 0x4000)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000440)=""/240, &(0x7f0000000100)=0xf0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
close(r5)
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\rpids '], 0x6)
r7 = getpid()
sched_setaffinity(r7, 0x8, &(0x7f0000000000)=0xe55)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000540)={{0x0, 0x3, 0xfffffbff, 0x1, 'syz0\x00', 0x7}, 0x5, 0x10000000, 0x634, r7, 0x0, 0x3, 'syz1\x00', &(0x7f0000000080), 0x0, [], [0x1670, 0x7, 0x2a29, 0x704c]})
sendto(r5, &(0x7f00000003c0)="5e9cb7", 0x3, 0x20040001, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{&(0x7f0000000400)={0xa, 0x0, 0x5, @remote}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="e5", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000840)='_', 0x1}], 0x1}}], 0x2, 0x0)

[  273.869854][   T33] audit: type=1400 audit(1596337924.428:23): avc:  denied  { sys_admin } for  pid=9994 comm="syz-executor.0" capability=21  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1
[  273.941637][ T9997] IPVS: ftp: loaded support on port[0] = 21
[  274.288617][T10007] device lo entered promiscuous mode
03:12:04 executing program 2:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x36, &(0x7f0000000100)=0xbaa)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x800, 0x0)
read$usbfs(r3, &(0x7f0000000500)=""/115, 0x73)
syz_open_procfs(0x0, &(0x7f0000000080)='net/bnep\x00')
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2da90100cced"], 0x6)
ioctl$KDSETMODE(r5, 0x4b3a, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="f8b4168e29b98147e9efd300"/23], 0x6)
ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f00000000c0))
write$FUSE_STATFS(r4, &(0x7f0000000000)={0x60}, 0x60)
close(r1)

[  274.676405][T10001] IPVS: ftp: loaded support on port[0] = 21
[  274.849435][   T33] audit: type=1800 audit(1596337925.408:24): pid=10011 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15803 res=0
[  274.922817][T10012] Y­4��`Ò˜: renamed from lo
03:12:05 executing program 3:
socket(0x15, 0x5, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000000200)=""/102400, &(0x7f0000000040)=0x19000)

03:12:05 executing program 2:
r0 = socket(0x23, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001500)='NLBL_MGMT\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4496}, 0x200401c0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001300000008000500", @ANYRES32=r1, @ANYBLOB="0ac145bb5bba000200bbbbbbbbbbbb0000"], 0x5c}}, 0x0)
r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r5)
r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r6)
keyctl$instantiate_iov(0x14, r5, &(0x7f0000000180)=[{&(0x7f00000000c0)="1fa71ce6ee8f8b29239a14d65a3b3ce05874385d6f154e7a2e680570e917660e72e040713d7421f45423a2a42bcadaf83f488590f809a69dd43deb646389eb851e63651dd4e77790f0", 0x49}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="61aa9839594170edbfdca1b91c3a718bc006eef5c95f56e2235e69bf0fa0fd6d7b0e7a54d37dc036450bbe41c484e929cc5bd63975b221116e179517ff5a02b7c2f3c1f953fe89f12c1f7b2bd82dbc81b6c0de4d4fca46b43ef492422ea8dfa3bb0c79ed14ba98b99850580f79d0acc688bbe4cb379dcce39d6c53f0779ee248dd3c69c9588d5e4f396ebf9f", 0x8c}, {&(0x7f00000012c0)="d144429df1931ca051a2b5ae36dd378ff779ca0c1b9119baf4983efb47ec19ff0eb1853b36bb472d4f7172e1592e72c8450395d0beeaf9db74ecc361060a07d860ea0596da0d856465b37dd830a9bd838857c7009dddad39980f9989e5875abdf8316d5705147f832dc3ccfc5c9f6867bc25173202c8a18d31de692eb212ad8e0852a71c3e1177c9275f6f548f2f461bbadef8ce20c54ecbce2fc6bdf9621c287bd5976a25419a293d33af443c7e0adfa4a719ca2409037778720fbac26070e291c28f672f199129b947d4f587b51b8a323ade88a8045fdd9bdddde21a781c8f121463667e754e32", 0xe8}, {&(0x7f00000013c0)="f83ff32073486f147b06e77afcd3b681016af6be561c0f58118a5dec24272c745b2345f1a6f0d458529fd5bc0dd16688247ec5e4182957738891389f00887181cd7b6e84c7129cdc419126bcb33019fbd94f8c8ec9113f", 0x57}, {&(0x7f0000001440)="cb5307738201fdf6a53f40ea7778a93111cd33f18cbcd16a3fc105d7a2e9ce2995b03196e64a4f45ef08d2ddae07dbea45c1cf82e3a73d8871a12a9fe37d9ce9db96b256f7a9aa0abec1ab8b52d7bb3c3f876c4050", 0x55}], 0x6, r6)

03:12:05 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000104539363ff5fc0a0bf5667e000000000000000000000b25eec3eb6f0a5b58216aaf67d328f46442537d14052434d8c6e6a1a0bc17922ad2e023f0d9ac2dc92d1c9fd45c61fa920621878e86e0c41f1ab4d7950caf48fdbe5a84c20bf4d8c8bf61f7efb8a3fbac12d99e4d5b587eb23e776618b2fd0fda4698925928cefdaebb871c25410", @ANYRES32=r12], 0x34}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001f00)=@newlink={0x28, 0x10, 0x42b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r12}]}, 0x28}}, 0x0)

[  275.397872][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.500946][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  275.521111][T10058] device bridge1 entered promiscuous mode
03:12:06 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}]}}]}, 0x45c}}, 0x0)

[  275.561122][T10063] device bridge_slave_0 left promiscuous mode
[  275.568427][T10063] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.691131][   T17] Bluetooth: hci3: command 0x0409 tx timeout
[  275.707092][T10063] bridge1: port 1(bridge_slave_0) entered blocking state
[  275.719392][T10063] bridge1: port 1(bridge_slave_0) entered disabled state
[  275.733301][T10063] device bridge_slave_0 entered promiscuous mode
[  275.743043][T10063] bridge1: port 1(bridge_slave_0) entered blocking state
[  275.752088][T10063] bridge1: port 1(bridge_slave_0) entered forwarding state
[  275.770520][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  275.793861][T10065] device bridge_slave_0 left promiscuous mode
[  275.802469][T10065] bridge1: port 1(bridge_slave_0) entered disabled state
03:12:06 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="40d7b200", @ANYRES16=r2, @ANYBLOB="01000000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000100000000004800020000000000"], 0x40}}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[  275.834399][  T448] tipc: TX() has been purged, node left!
[  275.944499][T10069] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  276.036796][T10070] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  276.074952][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  276.113051][T10058] bridge1: port 1(bridge_slave_0) entered blocking state
[  276.123281][T10058] bridge1: port 1(bridge_slave_0) entered disabled state
[  276.133895][T10058] device bridge_slave_0 entered promiscuous mode
[  276.143504][T10058] bridge1: port 1(bridge_slave_0) entered blocking state
[  276.151306][T10058] bridge1: port 1(bridge_slave_0) entered forwarding state
[  276.225166][T10065] device bridge_slave_0 left promiscuous mode
[  276.237880][T10065] bridge1: port 1(bridge_slave_0) entered disabled state
[  276.369833][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
03:12:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
mq_timedsend(r0, &(0x7f0000000140)="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", 0x1000, 0x80000001, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a001500aaaaaaaaaaaa0000060027"], 0x48}}, 0x0)

03:12:07 executing program 2:
socket(0x26, 0x4, 0x3dbe)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00')
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="40004f6473201981ab260babd37468f38347944a728aba46c80e2d87f0fcfd61f100ec79b234cef05579b8913cb3bac8a75e1613ce329c7cdfc288e1fab2e00e4b2416bbb81bf9b4a30959c95ecb50be1a05938e3e00b8399c4c954a13460bfc38072a16fdec0cb72c7ce55755bc0785e81d1d2183c2a03e7859"], 0x6)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000))

03:12:07 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0, 0x1}, 0x8)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendto$inet6(r1, &(0x7f0000000000)="88", 0x1, 0x404, &(0x7f000005ffe4)={0xa, 0x4e04, 0x0, @rand_addr=' \x01\x00', 0x1}, 0x1c)

[  277.714510][   T17] Bluetooth: hci3: command 0x041b tx timeout
03:12:08 executing program 3:
syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='resize=0'])

03:12:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f00000001c0)={0xa0, &(0x7f0000000100)=""/160})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000100005072cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="65350600dd1300001c0012800c0001006d6163766c616e000c00028008000100080000000a000500240000000000000008000a00", @ANYRES32], 0x50}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40440a0}, 0x8000)

03:12:08 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB="4c000000000000000000000000de000300"/48]})

03:12:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x141102, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0099b9342a7818cc39662d002abf817670f08684dd060434461b6d47346a186fd1b4e4e6628a205f0aeea458b6bc14a8a239c614b92024b78af03c18f569e854b1ff"], 0x74, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001380))
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x39400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x800)
io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "31c5fe26bdb4b300c4e9934a85f732870ad158fe3da4a771d9417930619a8f2dc159b4db22b4ce72d1661f527b603a4ea9f12f74662a05bae5bda5d09693f30aee51451eacc85304efae496b2aff5258"}, 0xd8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000007bd3caf63f1546d42d59f6d4356366972832af445f149964fe853b1d3d09eabdac973020ab39a6"], &(0x7f0000000040)=0x42)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0x20002084)

03:12:08 executing program 4:
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x9b0000, 0x2, 0xd55, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980929, 0x76, [], @p_u32=&(0x7f0000000000)=0x2}})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x0, 0x1, 'client0\x00', 0x2, "93ff5df1d3294aea", "06518bc4c15eb932fbee9caf0f81369e10e12439c339579b2227bea9a553aeb1", 0xfff, 0x4eb7})
ioctl$CHAR_RAW_PBSZGET(r0, 0x127b, &(0x7f0000000180))
r1 = socket(0x2c, 0x6, 0x8)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000001c0))
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3})
r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000280)={0xc, {0xe, "09fe2dda52d2a792d5cabb1509c9"}}, 0x14)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000002c0)={'veth0_to_team\x00', {0x2, 0x4e21, @local}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000300)={0x0, 0x3, 0x7, {0x7d, 0x10000}, 0x3ff, 0x4})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e8, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x75, 0x3, "9a5f5c375e46a6d2a38048304f2cbf7e51fb66329aafcb7ec159370a2cebc577eca492980d19a3b0b771fca1ea043686a3fffe6b03bc99f174efdab51e8bbc96aa691c85298888b356c6ae81001a1c84e4da1988da2d0437ec29991992447053b03abfdee25bad38d3c724f953c50e5370"}, @TIPC_NLA_NODE_ID={0xfa, 0x3, "d0d1397133a396d6710efd4e94b5a537b9590b8c7369a692c0a5fe172842b9fedd6bd6af70db7f6342f99db0dbc80e009e8ba7c3fad5717bd72fae6266c1e1e24a2dcdc536f3a07d246617a15b12e229fa3676aa99f0b1cf43806dbf39ccd8f8a1080053483f8ecf0d581a599ec3b0270fbb13dff8ca090f8ef7f6610cc9fa679572170c56714ecc63bb240657bdfb5696c0e97334cf27502ffe5d1745c9ceb3c1aba2347861817eb1c4ac7cb3c5990cbc51eba32205856fcbc9776954f7c74c9e9e54210c2221a34667c738c1a55a57bb1833998008cc3d00b7eb0ce477331a6273c2c31c6e77ca8e20a6bfe0973d18a461fb3f046c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000680)={0x7, [0x3, 0xd579, 0x20, 0xfffffffffffffffd, 0x8, 0x3, 0x7]})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000006c0))
r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000700)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000740)={0x8dc, "d250b3b4bb1a47fa0b4e535b0f79aa49198a44b739e89c8f5e81bd47b35219e2", 0x3, 0x3, 0x80000000, 0x2, 0x8})
r6 = openat$vcs(0xffffff9c, &(0x7f0000001f80)='/dev/vcs\x00', 0x408000, 0x0)
ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000001fc0)={0x9})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x52)

[  278.151426][T10098] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  278.173675][T10098] device veth1_to_team entered promiscuous mode
[  278.181663][T10098] device macvlan2 entered promiscuous mode
[  278.252529][T10101] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  278.396023][T10109] IPVS: ftp: loaded support on port[0] = 21
[  278.552678][T10101] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
03:12:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x141102, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0099b9342a7818cc39662d002abf817670f08684dd060434461b6d47346a186fd1b4e4e6628a205f0aeea458b6bc14a8a239c614b92024b78af03c18f569e854b1ff"], 0x74, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001380))
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x39400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x800)
io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "31c5fe26bdb4b300c4e9934a85f732870ad158fe3da4a771d9417930619a8f2dc159b4db22b4ce72d1661f527b603a4ea9f12f74662a05bae5bda5d09693f30aee51451eacc85304efae496b2aff5258"}, 0xd8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000007bd3caf63f1546d42d59f6d4356366972832af445f149964fe853b1d3d09eabdac973020ab39a6"], &(0x7f0000000040)=0x42)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0x20002084)

[  279.032393][T10104] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  279.067468][T10104] device macvlan2 entered promiscuous mode
03:12:09 executing program 1:
unshare(0x2a040600)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_evm(0x0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v2={0x0, 0x0, 0x14, 0x7, 0xb5, "41aedc851b0e3b9c29016dc33ec4ca557ce2ea2da7d9b4b7f3936d41d2d1813224ff8f6ffa88b4c3ed18b55e16e23ad2f27fdc6782efbb642b6d21b1c90865f3248fd60281ca2f75ce2d34682406fe32faef66fbe5afca7de4890f30c7cdf375a938725c01cdd12e1ebea30be3a58e61dd7527bf4ac9a976dfdf6026309e8050964d0f936361368a31a13f32929a78f8b94f04af1be8b9f1215cf5794f781429b4d7549b2e96e19714a20bb915438afe881c9a8882"}, 0xbe, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x800, "b84fde", 0x2, 0x3})
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getdents(r2, &(0x7f0000000200)=""/239, 0xef)

[  279.294504][T10128] IPVS: ftp: loaded support on port[0] = 21
[  279.608710][T10116] IPVS: ftp: loaded support on port[0] = 21
[  279.804373][T10067] Bluetooth: hci3: command 0x040f tx timeout
03:12:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x141102, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0099b9342a7818cc39662d002abf817670f08684dd060434461b6d47346a186fd1b4e4e6628a205f0aeea458b6bc14a8a239c614b92024b78af03c18f569e854b1ff"], 0x74, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001380))
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x39400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x800)
io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "31c5fe26bdb4b300c4e9934a85f732870ad158fe3da4a771d9417930619a8f2dc159b4db22b4ce72d1661f527b603a4ea9f12f74662a05bae5bda5d09693f30aee51451eacc85304efae496b2aff5258"}, 0xd8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000007bd3caf63f1546d42d59f6d4356366972832af445f149964fe853b1d3d09eabdac973020ab39a6"], &(0x7f0000000040)=0x42)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0x20002084)

[  280.353988][T10204] IPVS: ftp: loaded support on port[0] = 21
03:12:10 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x134}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/161)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x205, 0x0, &(0x7f0000000100), 0x18, &(0x7f0000000100)}], 0x492492492492805, 0x0)

03:12:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x141102, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0099b9342a7818cc39662d002abf817670f08684dd060434461b6d47346a186fd1b4e4e6628a205f0aeea458b6bc14a8a239c614b92024b78af03c18f569e854b1ff"], 0x74, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
io_submit(0x0, 0x0, &(0x7f0000001380))
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x39400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x42}, 0x800)
io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x2}}, 0x0, 0x0, 0x8, 0x0, "31c5fe26bdb4b300c4e9934a85f732870ad158fe3da4a771d9417930619a8f2dc159b4db22b4ce72d1661f527b603a4ea9f12f74662a05bae5bda5d09693f30aee51451eacc85304efae496b2aff5258"}, 0xd8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r1)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000007bd3caf63f1546d42d59f6d4356366972832af445f149964fe853b1d3d09eabdac973020ab39a6"], &(0x7f0000000040)=0x42)
io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0x20002084)

03:12:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fstatfs(r1, &(0x7f0000000a40)=""/4096)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x10001, 0x4, 0x3010, 0x3, 0x0, 0x3, 0x1, 0x6}})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0175acc6e8db903fa701000000000000"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  280.650627][  T448] tipc: TX() has been purged, node left!
[  280.835305][T10228] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.1'.
[  280.961791][T10230] IPVS: ftp: loaded support on port[0] = 21
03:12:12 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

03:12:12 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0)
write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x560)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6, 0x0, &(0x7f00000001c0))
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r8}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={<r9=>r8, 0x200}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={<r10=>r9, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xe, &(0x7f0000000480)={r10, @in, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, &(0x7f0000000140)=0xfc)

03:12:12 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x5, 0x0, 0x4, 0x81}, 0x14)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='\x002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  281.653141][T10116] chnl_net:caif_netlink_parms(): no params data found
[  281.879933][   T17] Bluetooth: hci3: command 0x0419 tx timeout
03:12:12 executing program 1:
r0 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x100, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0xe, 0xb0, 0x1, 0x6, 0x2a, 0x101})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x1)

03:12:12 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74)
openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000107a3eef6febeef40c73d0ab9aefb97c835e8d6627a5b6ba35ab533ea56374abcc8284364d579553fb5e3e6e435feb5d1dfc1df393435a3d1066a37aca979ed5264dadd5fd8ab469321df68af366a8238a0c680e9b86506b93f906ccfd23dbc52c0c27c94a26d069ca5e9bdfc2c556d43b9e140051a37bd88667509ef667b3f60f7c44b3f2ef6945a20c4f01c52d4ba0fbbc6367c4d0a2b2cf67ba", @ANYRES16=r3, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000b008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)

[  282.480230][T10116] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.487577][T10116] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.598596][T10116] device bridge_slave_0 entered promiscuous mode
[  282.663593][T10116] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.671928][T10116] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.681729][T10116] device bridge_slave_1 entered promiscuous mode
[  282.951119][T10116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.050073][T10116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.181077][T10116] team0: Port device team_slave_0 added
[  283.214982][T10116] team0: Port device team_slave_1 added
[  283.317656][T10116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.326073][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.355421][T10116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.435759][T10116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.442917][T10116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.469320][T10116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.667154][T10116] device hsr_slave_0 entered promiscuous mode
[  283.730774][T10116] device hsr_slave_1 entered promiscuous mode
[  283.779219][T10116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.786989][T10116] Cannot create hsr debugfs directory
[  284.136653][T10116] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  284.184794][T10116] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  284.226290][T10116] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  284.291044][T10116] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  284.431599][   T17] Bluetooth: hci4: command 0x1003 tx timeout
[  284.437841][ T8770] Bluetooth: hci4: sending frame failed (-49)
[  284.588141][T10116] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.682403][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.692005][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.701000][  T448] tipc: TX() has been purged, node left!
[  284.716005][T10116] 8021q: adding VLAN 0 to HW filter on device team0
[  284.765316][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.775691][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.785344][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.792913][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.852389][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.861798][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.871915][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.881710][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.889126][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.959549][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.970971][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.982035][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.992641][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.003096][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.013831][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.035851][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  285.046302][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.056308][ T8846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.099158][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.108428][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.122838][T10116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  285.273378][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.281723][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.332204][T10116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.669689][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  285.680011][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  285.733186][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  285.742928][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  285.759843][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  285.769417][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  285.806618][T10116] device veth0_vlan entered promiscuous mode
[  285.858015][T10116] device veth1_vlan entered promiscuous mode
[  285.936923][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  285.946883][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  285.956627][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  285.966595][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  285.998270][T10116] device veth0_macvtap entered promiscuous mode
[  286.039741][T10116] device veth1_macvtap entered promiscuous mode
[  286.109069][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  286.120385][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.130542][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  286.141226][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.151330][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  286.162244][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.172436][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  286.183141][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.198570][T10116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.213393][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  286.223367][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.233415][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  286.243666][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.264294][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  286.274968][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.286648][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  286.297383][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.307466][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  286.318320][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.328225][T10116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  286.338934][T10116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.353019][T10116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.367133][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  286.377402][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  286.510338][ T8846] Bluetooth: hci4: command 0x1001 tx timeout
[  286.516744][ T8770] Bluetooth: hci4: sending frame failed (-49)
03:12:18 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500})
syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x2c6, 0x6, &(0x7f00000026c0)=[{&(0x7f00000005c0)="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", 0x1000, 0x1}, {&(0x7f00000015c0)="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", 0x1000, 0x40}, {&(0x7f00000000c0)="3ad1ba62eb2afd947df871b645302a0b646937f3859a666c61d309c328b9df2da771e88bc5c3b212da16fe3c0dbc9bb17d9b227ead141c94535f3f616707ea5beda9579ec70420201a989941470b4d2c5441135a14cb36cecbcff1e8b5138a716d8828a5204daf9f1e55b57f8ac9a61796d8ed91368da532585552b4c77e3c0f616f2a79169d5e57e7e526a74909633e0039397a0850abb29124b915b3e9bb28ed14e002a0f294797957fd988dca", 0xae, 0x6}, {&(0x7f0000000180)="cfb618cce5d2acd820030a5f77963f9e23f3c1d0e222f3844d31fbabd063f4dde0c8c42888c7284962ee219873a01c67a282e2cddbf56f3a2232b693b30acfd6a7c6858a61", 0x45, 0x1}, {&(0x7f00000025c0)="25d6f40e7360871ac2a2427475fb29cc638c4bceffe741c9266f650aa71cef8bdca3b23dc05c41626819dfe4c2da7935c785bd122b6c67285e4fcc1a31a35d4d3d6b4f680b52bec318dba7883956f2e943ec10b46d6193cead66b1b787ec5d0a13e68d97d67bc38c8b3b87bc49e5421a9b8f5a12c46306ff72ba37a044209354d1d2d2b30dabfa48668f992662f84943ce714205fe947c689fd684a3237f4c48c0f36af8f74b1bb684e72c0af5e467df0ee3e2eea57e4d848f6394973421179938951ea53a73f4f78ffbf03528", 0xcd, 0x3}, {&(0x7f0000000200)="32d2c81f6ddde7a1fc2c1dcc3df2491ac8be2d6939386229a1c17dd8db4003de74cd45208786c6cf0e592d365d311f9b43b333c8", 0x34, 0x10001}], 0x80000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f00000002c0)={{0xa, 0x0, 0x1, 0x81, 'syz0\x00', 0xc55}, 0x0, [0xfffffff9, 0xd4f, 0x341d, 0x3, 0x2b8, 0xa3, 0x0, 0x1ff, 0x9, 0x8, 0x7, 0x4, 0x2, 0x5, 0xfe, 0x8, 0x80000000, 0x6, 0x4, 0x0, 0x400, 0x80000001, 0x85, 0x3f, 0x3, 0x1, 0x3, 0x3, 0x4, 0xa587, 0x3, 0x1, 0x8, 0x1, 0xb1, 0x10000, 0x101, 0xbcbd, 0xe0000000, 0x9, 0x8, 0x5, 0x7fffffff, 0x2, 0x2, 0x0, 0x2, 0x7fffffff, 0x20, 0x6, 0x8, 0x4, 0x4, 0x9, 0x1, 0x400, 0x0, 0x9, 0x1, 0x3, 0x7, 0x6, 0x90000, 0x80, 0x9, 0x8000, 0xf3e3, 0x7fffffff, 0x7fffffff, 0x5, 0x4, 0x8, 0x5, 0x80, 0x2, 0x200, 0x4d, 0x101, 0x6, 0x9, 0x9, 0x2, 0xff, 0x1, 0x7fffffff, 0x8, 0x1, 0x2, 0x8, 0x5, 0x3, 0x80, 0x5, 0x800, 0x80000000, 0x8, 0x6, 0x6, 0x7, 0xfffffff7, 0x1000, 0x1, 0x9d, 0x249a, 0x1f, 0x3, 0x2, 0x80000000, 0x11, 0x5, 0x4f070270, 0x4, 0x7ff, 0x5, 0x8, 0x8, 0x3, 0x0, 0x9, 0x0, 0x8, 0x42, 0x3, 0x6, 0x5, 0xffffffff, 0x1ff, 0x70]})

03:12:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x2008080)

03:12:18 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00b23400000000000000000030b6dea64a3cb8439c4faed42bdc7e084b6bd00ecbb18d6a3e6355eb7c5bbd0c6da14eea503b040827b6ce10847943317c25fbf17ca7e13952f2a0281b17418b13365c23bfe8dca8399199391539f58b2cf91c3383f16f69751b48f64fc829014f1f68071966729019568e5528e6922ed5ef0e397ced801d81191bb8cb4dd3a0e15782a5ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x5)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x300cce, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa607a5e34794710bdaaaaaa0000e90c300000000000000000000000000200"/47, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="49de8464c9223fd16c062a52b05fd333338768b2b39e76f6d25dca2fe35f6d051d74e5579adaa24a3bdcdd0fedfc542762eb44e9d2c436b82404bba160a846ae706a7f65ead0d6ebf533ea29f5bb4514533d1d8fcef0751e7e79da7213993b454767873648c4ec01697b9fed2ff950468a99c64767d51727ba05c4286fd913e4b24d42aa66945ca43b71075d76a4b29fd964c9393e2e734be4d869e5a94c352a88516ece74fcfafc7f2ba99b4a31bb5109c8bd9a604eeb0608052824f79b29bc2e152782c1f663948139ac919ae09f40923337250b0a4622425ca35ed9a28ca33d47b330fbc2c55cdf8295"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000010001fff003b00000b00000000000000", @ANYRES32=0x0, @ANYBLOB="ed158b00000000005c0012804e00010069883667726574617024c6a16ea1968eede328c8472fa55b8978f213cf296abe93f83f7deaee55434f1fa5acfb57"], 0xbc}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000640)={0x3, 0x1000, 0xdc, 0x1}, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400d36d887e0939070040b3010064edb6820fc720471ebf868ea124feac4f2e3302c34546c91410b123deed91e4b5fd5f46fbaa7b8f800c762aa86ace6ad9c4d3d1b48965338032eaae969d6e2a45345c9e6ee33bb7ceb819716776a5a1b7864ed8321a15824456a9ec84f345434d15d10fa031d8f0aade89cc19788e6638b5ad919599fb3ca98655c819dd1277d428d6e8207853eb70ea23e02c181f03e43892d41fb39337793c86800be7a96af493663597f42be7e7d5ae097a", @ANYRES16=r2, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xff11, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20004004)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

03:12:18 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c8, &(0x7f0000000040)={0x4, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0x36)
fcntl$getown(r1, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="020069647320"], 0x6)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x4000}, 0x8)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000))

[  288.374197][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  288.391578][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:19 executing program 4:
r0 = socket$inet(0x2, 0x80000, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'vxcan1\x00', {0x30}, 0x5})
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2d9c69647320"], 0x6)
ioctl$NBD_SET_SIZE(r2, 0xab02, 0x2)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2dadec2f913137b2c71478d3387207ac0a600562a920"], 0x6)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x83000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0431, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00')
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
sendto$inet(r3, &(0x7f0000d7cfcb), 0x0, 0x200000d0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/sockstat\x00')
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000280)=0x2, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e)

[  289.104837][    T5] Bluetooth: hci4: command 0x1009 tx timeout
[  289.141820][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  289.152786][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
03:12:20 executing program 0:
set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742)
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x82, &(0x7f0000000380)=<r1=>0x0)
io_submit(r1, 0x6aa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x400000000812d000, 0x9, 0x3, 0x8, 0x0, r0, &(0x7f0000000000), 0x1e}])
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000002c0)=0x2c)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7ff}]}}]}, 0x3c}}, 0x0)

03:12:20 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00b23400000000000000000030b6dea64a3cb8439c4faed42bdc7e084b6bd00ecbb18d6a3e6355eb7c5bbd0c6da14eea503b040827b6ce10847943317c25fbf17ca7e13952f2a0281b17418b13365c23bfe8dca8399199391539f58b2cf91c3383f16f69751b48f64fc829014f1f68071966729019568e5528e6922ed5ef0e397ced801d81191bb8cb4dd3a0e15782a5ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x5)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x300cce, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa607a5e34794710bdaaaaaa0000e90c300000000000000000000000000200"/47, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="49de8464c9223fd16c062a52b05fd333338768b2b39e76f6d25dca2fe35f6d051d74e5579adaa24a3bdcdd0fedfc542762eb44e9d2c436b82404bba160a846ae706a7f65ead0d6ebf533ea29f5bb4514533d1d8fcef0751e7e79da7213993b454767873648c4ec01697b9fed2ff950468a99c64767d51727ba05c4286fd913e4b24d42aa66945ca43b71075d76a4b29fd964c9393e2e734be4d869e5a94c352a88516ece74fcfafc7f2ba99b4a31bb5109c8bd9a604eeb0608052824f79b29bc2e152782c1f663948139ac919ae09f40923337250b0a4622425ca35ed9a28ca33d47b330fbc2c55cdf8295"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000010001fff003b00000b00000000000000", @ANYRES32=0x0, @ANYBLOB="ed158b00000000005c0012804e00010069883667726574617024c6a16ea1968eede328c8472fa55b8978f213cf296abe93f83f7deaee55434f1fa5acfb57"], 0xbc}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000640)={0x3, 0x1000, 0xdc, 0x1}, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400d36d887e0939070040b3010064edb6820fc720471ebf868ea124feac4f2e3302c34546c91410b123deed91e4b5fd5f46fbaa7b8f800c762aa86ace6ad9c4d3d1b48965338032eaae969d6e2a45345c9e6ee33bb7ceb819716776a5a1b7864ed8321a15824456a9ec84f345434d15d10fa031d8f0aade89cc19788e6638b5ad919599fb3ca98655c819dd1277d428d6e8207853eb70ea23e02c181f03e43892d41fb39337793c86800be7a96af493663597f42be7e7d5ae097a", @ANYRES16=r2, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xff11, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20004004)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

03:12:20 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r1 = syz_open_dev$sndctrl(&(0x7f0000001980)='/dev/snd/controlC#\x00', 0x2b59, 0x448000)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
r3 = dup3(r2, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000001a80)={{0x3, 0xf7}, 'port0\x00', 0xc1, 0x1d0003, 0xfffffff7, 0x1, 0x101, 0x5, 0xe7, 0x0, 0x1, 0x9})
sendfile(r1, 0xffffffffffffffff, &(0x7f0000001a40)=0x7fff, 0x8dce)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
recvmsg$can_bcm(r0, &(0x7f00000019c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/112, 0x70}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001780)=""/56, 0x38}, {&(0x7f00000017c0)=""/136, 0x88}, {&(0x7f0000001880)=""/99, 0x63}], 0xa, &(0x7f0000001980)}, 0x40000042)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001a00))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)

03:12:20 executing program 4:
r0 = socket(0x10, 0x802, 0x9)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1a1c5f1391bbbb9f679b731e08ed8da18f9a8cf974cd8050fa00ef93ac6e67585e213ad802ba3217c451f908eeb8d369d2f09f2567d9d4d25e5fa926b2146d7985268e7dd484f037459b9be34291011dd184b1d6d803ba36b86bc512e6b1673f4d925bf7b098af518230f5bfd32d6c847bf0d3e1f2a45628c06a46c06728da4a5e02f3f55949cde1c96b296f234eeb7fbeeba4407d4c0bc9099c92db3cd96dcd140a9a4a10ab8b5eb050aa900c1abb72b3972b5c4ec4ab", 0xb7}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x10, 0x0, 0x2, 0x3f}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1000}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0x3, 0xfe}, @timestamp={0x44, 0x1c, 0xe6, 0x0, 0x9, [0x3ff, 0x4, 0x1f, 0x7ff, 0x0, 0x5]}, @cipso={0x86, 0x64, 0x1, [{0x7, 0xd, "8e26e6237e1c75d08fee86"}, {0x6, 0xd, "6f3fc3b7dc6c1135f3330c"}, {0x1, 0x11, "6bd3531b1650845e9a7dfab6bf3581"}, {0x2, 0xc, "15cdbc403b0211b108a2"}, {0x7, 0x12, "1356d8cbdbbffcaf1fc20f1b21aaf617"}, {0x7, 0xd, "609dc053d9e93ae9da1cd0"}, {0x1, 0x8, "b462b0c5ae4d"}]}, @rr={0x7, 0x7, 0x9a, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0x8c, 0x3, 0x6, [{@local, 0x80}, {@loopback, 0x49}, {@dev={0xac, 0x14, 0x14, 0x23}}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@private=0xa010100, 0x2}]}, @noop, @end, @lsrr={0x83, 0x13, 0x1e, [@empty, @multicast1, @multicast1, @local]}]}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6940612ab694f31e231385ad20d8588c4ff045d76c078288fa8a04f5de5c3a731b64f7bbe91051cb9c7810445e962189fc41110d32802f7c0f012ba15e2ce4141d03a4b7325f98bbafa6d9c5da1efe450fd4a53c5f207cc5231fa9c46c22cdaac3606280dbb1850504f29f3f0b5781fd818363ac3761bca332dd9facb2c53a6251560d", 0x83}, {&(0x7f00000012c0)="88", 0x1}, {&(0x7f0000001300)="b32a34c8f343173e1991fbe9064fa633887336852ffccc7e13dbeb67f12e0fce06f480a78daa0e70c915a019aed3f361c968de2f4d5576fd613784d2e67dfbcd46603fa259491f0330807ad9a48a0d251d8f226b13979e3bf15f9b7730c81b06ead05e29de805edf8028982f122e74698604d3bd6a228dee7e845f8da768c84e6df5c5647b8c3a90683976f151399c818b8126244708e3f50097d4", 0x9b}, {&(0x7f00000013c0)="9b2c7496c2b8251ac6c826afe672f77c625201c64372ecd6953a8955ecf24c30d52992ba6f0c2a2a607913eca1640f024b75291b7877f5292bb3f0a211135f0c49bad2d3b0a5c561c7d948cccaeb6b2e83905efe4952b0eeb7aaf9c779a5369e9b6e5e7e0516dbcdcf4b83233d12d1ec46446a926b0cc09c8eb8ddee39360b01537784780f2136f8c873", 0x8a}, {&(0x7f0000001480)="aa689009167efcdf64b48ab18f864527d9040a14a9b5eec30e961f78c3282fffa0ed8e69937005ec513ae820861e57d3dd559e86d9d196957165c2ea0afb553fe7c715c1cfdc4c0d105ee63827020507dc2d00650322deea7f5e72bbd9d1d7b4a365f8331e75ec2839fcbda9686152d808fa60e84c23fb491db94a5b", 0x7c}, {&(0x7f0000001500)="8bb3e1ac", 0x4}, {&(0x7f0000001540)="4f64156227b503378325d88afcf4ed", 0xf}, {&(0x7f0000001580)="93e5667d61f1b0d3fa1835f2361db1bc0b8f946bc2a3ca8095833315d12249f3d1034419708b5caa949b59964db0b130ea19e0c5be9431dd1bb608a694d4bd946adbac30c8b82b48a82245a0c710bdabe92af9d17403b683d5ce80931f0944b06a52d07034f53c0eb6fb2f20fd3cf19adcccfa592bf3954802b06c83a9558a546062350d143bbda6e37c36e8b45568b4fd71e87586e785308803a52a1dbda5cedf94522739181a40da2cfbd10f4c081bc46e3240fde5e6bc3015d7e4c7c35df39aba6c57013da31eb5af21612e", 0xcd}], 0x9, &(0x7f0000001700)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10000}}], 0x10}}], 0x2, 0x20040051)
write(r0, &(0x7f0000002580)="24000000180005fb006b000420ed38200a190008fd10b5060010ffea08000100ff0500b7", 0x24)

[  289.803030][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  289.832533][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  289.960751][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.008590][T10579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=10579 comm=syz-executor.4
[  290.028340][    T5] Bluetooth: hci5: command 0x0409 tx timeout
[  290.076036][T10583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=10583 comm=syz-executor.4
03:12:21 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r2}, 0x10)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000100)=0x1)
sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f", 0x12}, {&(0x7f0000001500)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee2514903088dfd546a136d4", 0xb7}], 0x2}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x91, 0x0, 0x0)

[  292.107343][   T17] Bluetooth: hci5: command 0x041b tx timeout
03:12:23 executing program 1:

03:12:23 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200400, 0x0)
fcntl$setlease(r0, 0x406, 0x1)

03:12:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)

03:12:23 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc0002, 0x0)
setxattr$security_evm(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x1, 0xc, 0x280, 0x0, "6269cbeb038d3b7041e9033a6059f498ffeef091615e33b714d0eb9b99fd86fd35d8f56724b061f1ae0bff5f3f39284ebd8244afaceaa1a5f043b429c26c8c82d4b7554d347be6"}, 0xfffffffffffffe28, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080))
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140))

03:12:23 executing program 5:
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x13c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffcc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @multicast2}}}]}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7e}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0xf}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x57}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x6}}]}}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x4)
capget(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0xe5, 0x1, 0x8, 0x6d0000, 0x0, 0x1})
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x40eec0, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f0000000300)={0x5, 0x1, "794fd22a174a85397d646c0b76704a2f7b51acda0bbeefc5", {0x800, 0x1}, 0x80000000})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)='\x00'}, 0x30)
pidfd_open(r2, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000003c0)={0x0, @reserved})
ptrace(0x10, r2)
r3 = openat$vcs(0xffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0xc0041, 0x0)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000004c0))
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = openat$pfkey(0xffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x10182, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@initdev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000640)=0xe4)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000680))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f00000006c0)={{0x20, 0xf0}, 'port0\x00', 0x40, 0x20020, 0x8, 0x2, 0x3be, 0x8, 0x3, 0x0, 0x7, 0x6})
sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f00000007c0)={0x27, 0x1, 0x0, 0x2, 0x90, 0x8c, "5dea81ba1a5b4629d93ff1cf555d20528a059c8eaa614caef776fd45a4e16df1c76ef705d6bb4d0a9dd1ecfa93f24af5552fd8290e3bb852e19a39a6f549a4", 0x3e}, 0x58, &(0x7f0000000980)=[{&(0x7f0000000840)="09e32d148128e0eb58e016aa4c98f2ba82dfc0a1cdee83dd9eb6f3dbee07d8b4a09d16e88f92dcfc08ae02c15b318df6147a4fa7ee82f2c825782b9a5c8bf007be76175460e07f8a4dbf8c477761ea69c8d2eec1021b243ee9ca79afa475fd303f19aaca7d6f242088bd2c4ba12e0c2f2cb2bf37609943778ebe73563df480326234201b0e6555b2b7cf29ec3e3a69ad4862816d3043a3", 0x97}, {&(0x7f0000000900)="29c981e23c85c40b3a7d253b300cf88e4c329f43571af294e16a70c77bc36512e6378e464e5726368d88afa45e0a64d08d447290af12bc563b60d4909db981ed3a856d0b9dbc95b5e11e01b4cdebb216b5007d47a24759a09d5708cb21fba700c9dfd30cac6a36", 0x67}], 0x2, &(0x7f00000009c0)={0x70, 0x112, 0x80000001, "63d8f67d47f4684534235e50cf1d43bb5179698b932a56b538902bb999ab3946cf519c89aa54abb683b2ccd469f7647b259573e688f994c1d6d1ce2d7854952373351a84a265cb98ee0bc24b46e9d774f2ce30199e600ff0de5b713c2683d32d5a"}, 0x70, 0x10}, {&(0x7f0000000a40)={0x27, 0x0, 0x2, 0x4, 0x3f, 0x7, "3a1a259a7705104a547bcfcedbcf2aeb06b92acd93200dd754c7f7bc5af469dc2ee97498f844c977e76cec8341a615d5592b2dbe71b70d2faa55cb780ac9dd", 0x37}, 0x58, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="9dba6dd51e56c3ba451ee97e540a4dce3dd41c8818adbb81c79994e0f46e170d", 0x20}, {&(0x7f0000000b00)="437bbce54cc339cb7583fad9b6af09e8327151b6f85d827106a13753322e549e997e6ee1c3cdc09c7d14b9b8961e4af884f2c4ad3e67e706a3490a33c9e58fd39faada8fadc0078dbbd8feb5cc8abc8a413b25f4a1039b98b8f42c2d56632f05ca45b7f1cf226d97dfdb92f7d18ed1e78ce4ec8e954e4c2a2e5c88cdf7deee194ef6d0fc614021fe1fa7a633149cc57552ccde21ac54e808d857ffdc30c3fcbc04", 0xa1}, {&(0x7f0000000bc0)="f9a76d12d9ef7912276991d1f6f368d5d132d971081d3d176e71c23aca188a64eb16c03a2750f9a3992b23e4dbe98c63179f83fc66383f92df76e7876f1f90469e0a2ff9d1a911b0cca10aeab079dae92be40e9fccbad9ce5808baf958b825a649cdf938d7380f60aceee35b69bf3f22f732fac811c4da20104438b88c907bb68785a2f402b5b3f4a96e8e282e3638efcffe532ea71ad04f6e783c4cad52de77c3f467644e469063d3673d979ec1a58290769fdb99684235c08882d0f27678681bcde0649019580523d4aa236e107ada501ff18adb9a2c", 0xd7}], 0x3, &(0x7f0000000d00)={0xf4, 0x10f, 0x9, "f863742cd96a808842c5057982c936aa18639acd3ca7fa25be0914a3b0efdacc3c9dfcca35f7b56562889c93089945ee56ea4ee248424107f1e0e7d2c3460e595d453577061df82ddc0ebdccc9c48d04daeb46ea46c121fcfdfad61db6b1c2ebeaf584f2ea3a3a9a0dfaf95aab6c398135091bfe8c809b7cd9149c809413f9772eada40fa1c61562af6335e70e1be2c63d024e1f7b4c2f3089703e186a50b6a3b2d5416e30ec894e02961b5f5cf9421ce1586a20d39164db644785faf334eee7d182b1679e8c4394c5655b0d5f3e5d884858bc5e9ddcbe0981135ba6f145c941145e9342f9e5c970"}, 0xf4, 0x24008814}, {&(0x7f0000000e00)={0x27, 0x1, 0x2, 0x2, 0x1f, 0x8, "4f99c6648566fa2f0845b38b728531ca29219926ba30a73f8e622b06dccd317c45b4d7142894d6cd766712933888bacd036ee40b127cd2deba2d0ae58b2382", 0xb}, 0x58, &(0x7f0000001340)=[{&(0x7f0000000e80)="cac442f56122ad37f79eb2f8d05353d94b5b25832e25f5116c73cc7d7152c6ed6b7f4bebbb7d1288502dc8ee9ad225db1ded8efbf2b8a770130b73fda12f09d4b209ea15d34ea6d311bd222661fd66293cee8b691bed759c4e8cdd226e26d7428eb38b5c80c0a7473ced7e8a01572d37966080671d0a8bc0197240527d9e24409153d839b3523d1d82fc44befab5f66892419db9bd16f9c2a0a1", 0x9a}, {&(0x7f0000000f40)="c13bfb3f64886fe4c23b67f802f9cd79b2504b06a4d2d2d27b5dfc91f2ea9322249de1ac5cce33970f22483477dd7298231294ef039e89cf4df5434a28402119de821c91b7685e88a611fa1066d6f34930b6fb8b9cfde6a76eef6d4ed7814c608363b4fdefbe50ce21f90845a0646e89e7a4d7d668c00c2b58d813997f3b45016a98422f35a907cc7066fc034d5a9f41b860204bb0b5c3f1d87640645feb94b75e6029b508337941b3daa36d0ee290b352f2f5bfa78edc000e8840e10bb67cd2cd37e85f460989f59b88f2", 0xcb}, {&(0x7f0000001040)="5db6821f4f713b589bfd46d609f7a02265991c39f37598af9fe3693abc4989b058bccd55c8f2679447", 0x29}, {&(0x7f0000001080)="8b201818a41af4f8124aeaabbd8d4f7bd426e72675ceffb023cdc115f00d7105d02c5e5d062cb80fd8935f603070ae39667da54e918467eedef60af0102c7dd993fd77bb0be35ec1517bf5cc0c1402c56787ec05325fc1f03e8b2f4cbb21b35266a1ff69c54f2dd30c86cd0ba5db666843963c771673a254271aee510de994857e6e3fd06cb33d73175c0732ea2dc47f934341bec9a82c70750f60b2efbca4858f91d91ad006544b98a8057db931d6e488bc373da5c2c243ec4d389aad77243a70f238e8d95bbdecbdb9019cefffae4680de930487d026a6824384", 0xdb}, {&(0x7f0000001180)="ebacf56542e09aaf7d6f8acfbd26131810cf2636c08ebc37bef856e10493a1588ad94dc7bc875288c6a107d2dd7d68950f73ec49423f79a2801d3401d554c6aa02ebc9600309949ba6423ed7591e96b0b4b942bdaae85f5d5af0a53914c77d3afc6e53d8bef7cc30a9a88031cf44a3636a9a5b8f4235b5c1dac7539318ae8a220dc4660802c7d0f49abd2fa2139f317d5c1a4b699acce3779f79d9b059a0dd213962f93681cf993b10840083e921e8", 0xaf}, {&(0x7f0000001240)="baf54cb26890c6d2621afb9102372207cabc8362d8a82a48022d77bf3a96cd9e95f667cc6401bc4fd735a6eb24272144335f3e839e28267641db0b8868ce702c7f1157a672c1ff95c325790dc748d7c1e0ff19d805f16968d6b8ed8c96a816e8af42c0e12253109dbb3b848017ec8e5034852255461b97e8ae5f157dd454322d475ca94d3aa57bbb60ae60b97d761e5054f800be1247d9687c7a0a5f4a6233f5612d8961c017bbf5b37a2ff41bdc87beb1e2e00f827c974d653de8b3aae774b8b8dc8917b49985719be8c617ad433ef5bb74a8e64fa9b9ed113d3ed63b", 0xdd}], 0x6, 0x0, 0x0, 0x10}, {&(0x7f0000001380)={0x27, 0x0, 0x2, 0x5, 0x8, 0x7, "12540129ef7a0b74f94e65f69fda31b15895c751184d57e707a505fd8a8fb6c1b5c19a9868d4317a33e0eee9333f945f2d1c92d4c8d6a5404bc78b8f64db6f", 0x25}, 0x58, &(0x7f0000001480)=[{&(0x7f0000001400)="ee9bbfe1c35ab03417f1cb58633a8bc86a0421bde3813162de77366add483a2da579895d91e7769ea846c0b93db2eed1170d6bc3c718095f8335e6f9c2f4f98ea3207f4583a8f8923975614b4fb92bbd9e2fe8fc", 0x54}], 0x1, &(0x7f00000014c0)={0x1c, 0x108, 0x1, "295aa30e24113d8745c470a1420d"}, 0x1c, 0x80}, {&(0x7f0000001500)={0x27, 0x1, 0x2, 0x2, 0xc8, 0x6, "eee69205803ec56842ee57c4133c12e395e30f4eb5625bc4eaf29226fe538b2db121008fc40cfbae789f965043fdaaaa204950175cb800522f1c676719708e", 0x36}, 0x58, &(0x7f0000001740)=[{&(0x7f0000001580)="a95c57c70ae7d0abb03d09349dda6142a4bb0bae792f451e6c00ee889a5c3e718f07c57ed17a5015367eda0ee4e8714a5420829631ec5c5a9b5d9392268883968bab7a640ceff6a57315d9c39be155c193a4c575deecabde64d33204764bef61f03e7fa05e416f629165250eb57825b844a88d565eef6f139890ed9d9e49c10279f7a0c4149a8edbeb251dbe6c1b843077", 0x91}, {&(0x7f0000001640)="8049f1b82f9c7ce03317c6b8b8df29224d44e7a6de3e63071f2ac29f801b369c3ba331e2a5cb0e0b243fbcc56962394469f846dd67b4332695cc5017dbce32c65dc4", 0x42}, {&(0x7f00000016c0)="3c200ca7cb0214a395a1f16a9ad4ab7639c5b38b02b64aeac86f4592e761fd5b9baebbc6d702b710d35d9f", 0x2b}, {&(0x7f0000001700)="424bc894b5b2c20a14614e1ae2b8c3ec7d4e336a50de647b5ade2c3319e78ab956aac7a0ce271e6f9273b9f6408a46749f7a2d1db43f95400711a639", 0x3c}], 0x4, &(0x7f0000001780)={0x3c, 0x102, 0x8c, "23144e968623d6935c491858fb0e7154686d9b1b1f387369f3370d734da0e6a36d8c11d08b5ae160e654c1cd963b7f68"}, 0x3c, 0x40000}], 0x5, 0x0)

03:12:23 executing program 0:

03:12:23 executing program 4:

03:12:23 executing program 3:

03:12:23 executing program 0:

03:12:23 executing program 1:

03:12:23 executing program 2:

03:12:24 executing program 3:

03:12:24 executing program 4:

03:12:24 executing program 0:

03:12:24 executing program 1:

03:12:24 executing program 2:

[  294.220320][   T17] Bluetooth: hci5: command 0x040f tx timeout
[  294.264583][T10632] IPVS: ftp: loaded support on port[0] = 21
[  294.581789][T10632] chnl_net:caif_netlink_parms(): no params data found
[  294.695630][T10632] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.703162][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.713072][T10632] device bridge_slave_0 entered promiscuous mode
[  294.722935][T10632] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.730306][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.740507][T10632] device bridge_slave_1 entered promiscuous mode
[  294.783074][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.796130][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.833866][T10632] team0: Port device team_slave_0 added
[  294.843407][T10632] team0: Port device team_slave_1 added
[  294.878990][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.886026][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.913165][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.926006][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.933693][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.960049][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.051624][T10632] device hsr_slave_0 entered promiscuous mode
[  295.087109][T10632] device hsr_slave_1 entered promiscuous mode
[  295.126554][T10632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.134332][T10632] Cannot create hsr debugfs directory
[  295.317543][T10632] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  295.372714][T10632] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  295.443682][T10632] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  295.495560][T10632] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  295.663431][T10632] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.687338][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.696830][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  295.713486][T10632] 8021q: adding VLAN 0 to HW filter on device team0
[  295.730167][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  295.740712][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  295.750261][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.757789][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.770337][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  295.784379][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.794537][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.804904][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.812282][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.859204][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.870424][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.883815][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.894755][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.905173][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.915109][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.925730][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.935471][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.944764][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.955207][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.970335][T10632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.980568][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  296.015220][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  296.023311][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  296.044495][T10632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.140546][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  296.150718][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.188010][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.197921][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.213623][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.222352][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.240885][T10632] device veth0_vlan entered promiscuous mode
[  296.262661][T10632] device veth1_vlan entered promiscuous mode
[  296.272754][   T17] Bluetooth: hci5: command 0x0419 tx timeout
[  296.312416][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  296.322181][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  296.331843][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  296.341430][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  296.364560][T10632] device veth0_macvtap entered promiscuous mode
[  296.379292][T10632] device veth1_macvtap entered promiscuous mode
[  296.407232][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  296.418113][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.428136][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  296.438851][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.448944][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  296.459616][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.469673][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  296.480381][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.490676][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  296.501397][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.514030][T10632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.522841][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.532454][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.542027][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.552226][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.574149][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  296.585258][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.595446][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  296.606107][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.616203][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  296.626936][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.636995][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  296.647710][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.657846][T10632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  296.668484][T10632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.681992][T10632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.692336][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.702098][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  297.389697][    T0] NOHZ: local_softirq_pending 08
03:12:28 executing program 5:

03:12:28 executing program 0:

03:12:28 executing program 4:

03:12:28 executing program 3:

03:12:28 executing program 1:

03:12:28 executing program 2:

03:12:29 executing program 4:

03:12:29 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @dev}, 0x1c, 0x0}}], 0x1, 0x0)

03:12:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e157750270816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[], [], 0x6b}})

03:12:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc002204}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1060, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "24c76ca49652ce74fdc4b474e636ed55bee183ffeda821a742ff99c621c7e4e9", "366b50875d66c6c7a9365bb5e4a97365605a97c6464303c6de1b5f279574fcda"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "167869108bc4c23e5322c9c1313d45a1627eb3276c7f11128d2cc811e491f368", "ef1672db5bca199245709274783401ff55b0de2ef940513ed1ee972c68d5e87e"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "bc8c70ccd1077b4fa81562f9987d7a09f01f4fef017c2fb0ce734187194d559d", "5b09c3a4e7a84ed4921417d47dae0e3e7525e7b971a63b8743ef90ca01282950"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "3a528713fb1321ad61866489739755cc2502cc8810ad4185f527c72d42030d05", "0843433be064581360a022a800cc075074027751a330224844186acfebb797ea"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "725707aa9af269a15b7a06205ad30de5d06d7ac0a9b2ea83165d50e7f3ce1a70", "87848adecdd8ffb320ae138c3884515bf29cd54121a9a92eee136574f4f34b02"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "6c58e1ac9716dde1174ad122e0a9e9c3b43403c7d225b45dbd2c6e8584c5dc85", "48daad99939ad801dc94e9adf523b7a6821e7d57d21bfc8ac41e5902f7e53992"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "a00e1b1a601855cc3a4422583a580c9d06bc3876528f76108e98c104b73b85f2", "549448f202898d9a26818a96b1c9b26bc6205051e4dae40f5decbb833912eaf0"}}}]}, 0x1060}}, 0x0)

03:12:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

03:12:29 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x40)

03:12:29 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0)

03:12:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/58)

03:12:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e157750270816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)

03:12:29 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x25, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r1, 0x40)

03:12:29 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000001f00)=ANY=[@ANYBLOB="0000010000000000000060a5c26800281100fe800000000000000000000007000000ff020000000000000000000000000001860090780000000000000000000000000019e5fb000005005357cd99e33bca98e246dc9027003334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde319236"], 0xfca)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0))

03:12:29 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xed)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
tkill(0x0, 0x0)

03:12:30 executing program 4:
syz_mount_image$jfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x17}}, 0x14}}, 0x0)

03:12:30 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x23, 0x24, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)

03:12:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4)
shutdown(r0, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x14)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)}, {&(0x7f0000000180)="c5b4ad0051518a7d6acaeab8c36ba346a3ee13bbcc2e9e1204ba5d245722c0424f5f7be1796e8aed6d4de2db4652be1c24cf02af00c7d1a326ea8608ed85a3b1616a851959c1de8df636508f9791ec43e61839c87fe0cfc9e0cb17813a135ff6e33b452f52c9529b387bed439dd80a04c3d4be80ef758c693c0a3cba215cb99f664c888a81ad69de525aba2cdceb6376e163fae9", 0x94}], 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0)
connect$rose(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="ecc15095da62d9355920f2a401a08603bc2e92672ba2b378f7762ca34730afb11bd7154882c17e1e5a04beac8af616e18fbe7eb2678e98e773313a48bfb4", 0x200000fe, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

03:12:30 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getpeername$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10)

[  300.106895][    T5] Bluetooth: hci4: command 0x0409 tx timeout
03:12:30 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:30 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000030003b050000000000000000000000004c000100480001000b00010073616d706c6500001c0002"], 0x60}}, 0x0)

03:12:31 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0)

03:12:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/47)

03:12:31 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:31 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x44, &(0x7f00000002c0)="a95940b30886804df80814191fef41dc8f9e223e5252cb91206497e38c8224c4e614b6dd443c05f49d21040c4f397916ca311897f8589b20682b870682bcf239d5e04016"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  300.726664][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  300.736482][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:31 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000001d80), &(0x7f00000031c0)=""/4096}, 0x20)

03:12:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e157750270816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0)
dup(0xffffffffffffffff)

03:12:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)

03:12:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e157750270816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0)

03:12:31 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:31 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x26, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5ca"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r1, 0x40)

03:12:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)

03:12:32 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:32 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x21, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r1, 0x40)

03:12:32 executing program 3:
socket(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x4}}]}, 0x30}}, 0x0)

03:12:32 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r2, r1, 0x0, 0x1c01)
dup3(r0, r1, 0x0)

03:12:32 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000028c0)=@newtfilter={0x24, 0x1d, 0xd27}, 0x24}}, 0x0)

03:12:32 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2b, &(0x7f0000000080)="c4c691019919da078a0098d1e0a593b040f762a800000000000000223c9aa152351abcc9f42f7e007f1dd6"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x40)

[  302.303021][ T8846] Bluetooth: hci4: command 0x041b tx timeout
03:12:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)

03:12:33 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x22, &(0x7f00000002c0)="a95940b30886804df80814191fef41dc8f9e223e5252cb91206497e38c8224c4e614"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

03:12:33 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "06ee6ed2"}]}}}}}}}}, 0x0)

03:12:33 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x13, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r1, 0x40)

03:12:33 executing program 5:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x42, &(0x7f00000002c0)="a95940b30886804df80814191fef41dc8f9e223e5252cb91206497e38c8224c4e614b6dd443c05f49d21040c4f397916ca311897f8589b20682b870682bcf239d5e0"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

03:12:33 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

03:12:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
r0 = io_uring_setup(0x171e, &(0x7f0000000040))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
syz_io_uring_complete(r1)
r2 = syz_io_uring_complete(r1)
dup(0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x20, 0xfffffff8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0903, 0x9, [], @value64=0x6}})

03:12:34 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:34 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x1c, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
tkill(r1, 0x40)

03:12:34 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)

[  304.360655][    T5] Bluetooth: hci4: command 0x040f tx timeout
03:12:36 executing program 3:
request_key(&(0x7f0000000540)='keyring\x00', 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00')
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000001f00)=ANY=[@ANYBLOB="0000010000000000000060a5c268002811"], 0xfca)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0)

03:12:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0xb}]}}}]}, 0x40}}, 0x0)

03:12:36 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d028b2b", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYRES32=r4], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

03:12:36 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000028c0)=@newtfilter={0x24, 0x10, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0)

03:12:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)

[  305.946907][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.000819][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.019459][T11087] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  306.030258][   T33] audit: type=1804 audit(1596337956.604:25): pid=11090 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir532711164/syzkaller.fCOdsv/15/cgroup.controllers" dev="sda1" ino=15948 res=1
[  306.090779][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.101337][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
03:12:36 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000009580000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:12:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r1)
shmctl$IPC_STAT(0x0, 0x2, 0x0)

[  306.424423][    T5] Bluetooth: hci4: command 0x0419 tx timeout
03:12:37 executing program 4:
socket$key(0xf, 0x3, 0x2)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(r0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

03:12:37 executing program 2:
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001b00))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

03:12:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:37 executing program 3:
msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0)

03:12:37 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/47)

03:12:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x21, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x40)

03:12:37 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

03:12:37 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x0, 0x2}, 0xe)

03:12:37 executing program 2:
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}], [{@dont_appraise='dont_appraise'}]})

[  307.512901][T11146] jfs: Unrecognized mount option "dont_appraise" or missing value
[  307.608196][T11146] jfs: Unrecognized mount option "dont_appraise" or missing value
03:12:38 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x2e, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322f"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x17)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x40)

03:12:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x200}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0)

03:12:38 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

03:12:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = io_uring_setup(0x171e, &(0x7f0000000040))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
syz_io_uring_complete(r1)
dup(0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)

03:12:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a0000001000001b", @ANYRES32=r4], 0x4}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000002)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)

[  308.160828][T11166] tipc: Started in network mode
[  308.166207][T11166] tipc: Own node identity ff010000000000000000000000000001, cluster identity 4711
[  308.176214][T11166] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
03:12:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
listen(r0, 0x1)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

03:12:38 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

03:12:39 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x6}})

03:12:39 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000))

[  308.504299][   T33] audit: type=1804 audit(1596337959.075:26): pid=11182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir532711164/syzkaller.fCOdsv/19/cgroup.controllers" dev="sda1" ino=15973 res=1
03:12:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3335010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

03:12:39 executing program 4:
syz_mount_image$jfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0, &(0x7f0000000240))

03:12:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @dev}, 0x10)
r0 = io_uring_setup(0x171e, &(0x7f0000000040))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
syz_io_uring_complete(r1)
dup(0xffffffffffffffff)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0903, 0x9, [], @value64=0x6}})

03:12:39 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$FIGETBSZ(r0, 0x4008af12, &(0x7f0000000080))

03:12:39 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)

03:12:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:39 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8822, &(0x7f00000001c0)={[{@journal_checksum='journal_checksum'}]})

03:12:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x121041)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x1c, 0x2}})
write$evdev(r0, &(0x7f0000000040), 0x168)

03:12:40 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[], 0x18)

03:12:40 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

03:12:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)

03:12:40 executing program 2:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)={0x13d, 0x3, 0x0, {0x0, 0x11c, 0x0, 'system.posix_acl_default\x00\xcd\xe3\xb0\x12\xcaTc\xeb\x1b\xfbC%i\x8ckyf\x90Qr\xd7Cz!O`\xbee\xa6\xaa\rPM\x82|\xfc1\xe1\xb4\xf1\xe7.U\xc7|\xf00\x1eImc\x0e\xb3\x03/rI\\\xd5$\xcdN\xc3\x95\xe3#\x17#\xa3\xf5:\x01\\\x8e\x80Q\x10x_\x87\xa2\xb7V=\xf6n\xb4\x94\xc9\x1e\x8d\x8c\x01\xffu^\xb2J\x12\xe4;\xb6A\xe4|mB\x11\xf2u\xdb\xd3C\xe1fVk6MQ\xa0\xc9V;o\x88\xda>M\x9e<;\x82\\\xf6\x9cfu\\\x9b(\x93m\xa8\xb4\xf75\xc5&E+l\xd0\xa7\xd3\xb0\xa9b\xfc\xe3S\xa3\xdc\x13\xc0(\x88Xky5\xa3\xf2\xae\xe2@&\x9d\xf8\x86\x13\x9a#\xb1\x1f\x1b%6\xf3C\x90\xf2X\xde\x1ck\xaf\x83\x80\xbf\xff!.\"A\\\fv\xebK\f\xf4QOE\xf2u\f\x80\x109\xb0\xd0;\xe3\xa5gb\xf3\x18\xdbN\x181\x10\xff\xe5s=\x8b\xa1\x9a\xc4\xb9\a3\"\'\xfc\xdd\xeb\x1eJ\x00e?\\\xf1;'}}, 0x13d)

03:12:40 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)

03:12:40 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)={0x13d, 0x5, 0x0, {0x0, 0x11c, 0x0, 'system.posix_acl_default\x00\xcd\xe3\xb0\x12\xcaTc\xeb\x1b\xfbC%i\x8ckyf\x90Qr\xd7Cz!O`\xbee\xa6\xaa\rPM\x82|\xfc1\xe1\xb4\xf1\xe7.U\xc7|\xf00\x1eImc\x0e\xb3\x03/rI\\\xd5$\xcdN\xc3\x95\xe3#\x17#\xa3\xf5:\x01\\\x8e\x80Q\x10x_\x87\xa2\xb7V=\xf6n\xb4\x94\xc9\x1e\x8d\x8c\x01\xffu^\xb2J\x12\xe4;\xb6A\xe4|mB\x11\xf2u\xdb\xd3C\xe1fVk6MQ\xa0\xc9V;o\x88\xda>M\x9e<;\x82\\\xf6\x9cfu\\\x9b(\x93m\xa8\xb4\xf75\xc5&E+l\xd0\xa7\xd3\xb0\xa9b\xfc\xe3S\xa3\xdc\x13\xc0(\x88Xky5\xa3\xf2\xae\xe2@&\x9d\xf8\x86\x13\x9a#\xb1\x1f\x1b%6\xf3C\x90\xf2X\xde\x1ck\xaf\x83\x80\xbf\xff!.\"A\\\fv\xebK\f\xf4QOE\xf2u\f\x80\x109\xb0\xd0;\xe3\xa5gb\xf3\x18\xdbN\x181\x10\xff\xe5s=\x8b\xa1\x9a\xc4\xb9\a3\"\'\xfc\xdd\xeb\x1eJ\x00e?\\\xf1;'}}, 0x13d)

03:12:40 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

[  310.289079][T11242] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring
[  310.354529][T11242] EXT4-fs (sda1): re-mounted. Opts: journal_checksum,,errors=continue
03:12:41 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000)

03:12:41 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

03:12:41 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$FIGETBSZ(r0, 0x4008af21, &(0x7f0000000080))

03:12:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none}, 0xe)

03:12:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:41 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

03:12:41 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$FIGETBSZ(r0, 0x4008af04, &(0x7f0000000080))

03:12:41 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none}, 0xe)

03:12:41 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$FIGETBSZ(r0, 0x4008af24, &(0x7f0000000080))

03:12:42 executing program 0:
timer_create(0x0, &(0x7f0000000040)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r0, &(0x7f00000017c0)=""/407, 0x197)
bind(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)

[  311.390906][T11305] kvm [11302]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:12:42 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  311.549761][T11314] kvm [11302]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:12:42 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3f, @none}, 0xe)

03:12:42 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
sendmmsg(r0, &(0x7f00000012c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x7fffffff}, 0x80, 0x0}}], 0x1, 0x0)

03:12:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:42 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f0000000040)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unlink(&(0x7f0000000000)='./file0\x00')

03:12:42 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

03:12:42 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

03:12:42 executing program 2:
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')

[  312.273407][T11338] kvm [11336]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:12:42 executing program 5:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
r2 = dup(r1)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})

03:12:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:43 executing program 1:
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  313.062955][T11364] kvm [11362]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:12:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

03:12:43 executing program 2:
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044941a4976e252922cb1996e2e34ba800000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3fedb1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001080)=""/4112, 0x1010}], 0x1}, 0x0)
shutdown(r1, 0x1)

03:12:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {0x0, 0xe8}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f)

03:12:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  313.889737][T11392] kvm [11390]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:12:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x6)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)

03:12:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

[  314.081158][T11400] input: syz1 as /devices/virtual/input/input5
03:12:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  314.331539][T11403] input: syz1 as /devices/virtual/input/input6
03:12:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

03:12:45 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x2c}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f)

03:12:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {0x0, 0xe8}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f)

03:12:45 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x7, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180))

03:12:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  314.879488][T11431] input: syz1 as /devices/virtual/input/input7
[  314.902420][T11432] input: syz1 as /devices/virtual/input/input8
[  315.101332][T11432] input: syz1 as /devices/virtual/input/input9
03:12:45 executing program 5:

03:12:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {0x0, 0xe8}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f)

03:12:45 executing program 2:

03:12:46 executing program 0:

03:12:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

[  315.622524][T11469] input: syz1 as /devices/virtual/input/input10
03:12:46 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d002000098000000000000000000000000000000000000003802000038020000380200003802000038020000040000000000000000000000ac141400ac1414bb0000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000009800e000000000000000000000000000000000000000000028006473637000000000000000000000000000000000000000000000000000000000000000000000480054454500000000000000000000000000000000000000000000000000000100000000000000000000ffff0000000073797a6b616c6c6572310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000009800c000000000000000000000000000000000000000000028006c656e6774680000000000000000000000000000000000000000000000000000000001000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xfed8}, 0x14)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0)

03:12:46 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8880fe800001000000000000000000000600ff02000000000000000000000000000101004e20004590"], 0x0)

03:12:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:12:46 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
unlink(&(0x7f0000000040)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)

03:12:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x1c01)

03:12:46 executing program 3:

03:12:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:12:46 executing program 2:

03:12:46 executing program 3:

03:12:47 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:47 executing program 3:

03:12:47 executing program 2:

03:12:47 executing program 5:

03:12:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:12:47 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:47 executing program 0:

03:12:47 executing program 3:

03:12:47 executing program 2:

03:12:48 executing program 3:

03:12:48 executing program 0:

03:12:48 executing program 2:

03:12:48 executing program 5:

03:12:48 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

03:12:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x1c01)

03:12:49 executing program 3:

03:12:49 executing program 5:

03:12:49 executing program 2:

03:12:49 executing program 0:

03:12:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

03:12:49 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

03:12:49 executing program 5:

03:12:49 executing program 3:

03:12:49 executing program 0:

03:12:49 executing program 2:

03:12:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

03:12:49 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

03:12:49 executing program 3:

03:12:50 executing program 5:

03:12:50 executing program 0:

03:12:50 executing program 2:

03:12:50 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:50 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1c01)

03:12:50 executing program 5:

03:12:50 executing program 3:

03:12:50 executing program 0:

03:12:50 executing program 2:

03:12:50 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:50 executing program 5:

03:12:50 executing program 3:

03:12:50 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:12:50 executing program 0:

03:12:51 executing program 2:

03:12:51 executing program 4:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:51 executing program 5:

03:12:51 executing program 0:

03:12:51 executing program 3:

03:12:51 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:12:51 executing program 2:

03:12:51 executing program 5:

03:12:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:51 executing program 3:

03:12:51 executing program 0:

03:12:51 executing program 2:

03:12:51 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00')
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:12:52 executing program 3:

03:12:52 executing program 0:

03:12:52 executing program 5:

03:12:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:52 executing program 2:

03:12:52 executing program 1:

03:12:52 executing program 0:

03:12:52 executing program 5:

03:12:52 executing program 3:

03:12:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:52 executing program 2:

03:12:52 executing program 1:

03:12:52 executing program 0:

03:12:53 executing program 5:

03:12:53 executing program 3:

03:12:53 executing program 2:

03:12:53 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:53 executing program 1:

03:12:53 executing program 0:

03:12:53 executing program 5:

03:12:53 executing program 3:

03:12:53 executing program 1:

03:12:53 executing program 2:
unshare(0x44000600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x110, 0x1}, 0x40)
bind(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20)

03:12:53 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x3, 0xfffffffd)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e23}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x43a1, 0x7f})
r1 = socket$inet6(0xa, 0x80000, 0x7)
getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000013000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

03:12:53 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:53 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETAF(r2, 0x402c542c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, "200093da00"})

03:12:53 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev}})

[  323.315145][T11646] IPVS: ftp: loaded support on port[0] = 21
03:12:54 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000013000))

03:12:54 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:54 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000013000))

[  323.787071][T11646] IPVS: ftp: loaded support on port[0] = 21
03:12:54 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
r2 = dup(r1)
write$uinput_user_dev(r2, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$FUSE_DIRENTPLUS(r2, 0x0, 0xfd30)

03:12:54 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000013000))

03:12:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6(0xa, 0x803, 0x2)
socket$tipc(0x1e, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8)
sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0)

[  324.252246][ T1453] tipc: TX() has been purged, node left!
[  324.356674][T11720] input: syz0 as /devices/virtual/input/input11
[  324.459297][T11720] input: syz0 as /devices/virtual/input/input12
03:12:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/77, 0x4d}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {&(0x7f00000004c0)=""/115, 0x73}], 0x2, &(0x7f0000000540)=""/48, 0x30}, 0x5}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="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"/360]}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

03:12:55 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$RTC_PIE_ON(r0, 0x8008700b)

03:12:55 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}})

03:12:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:55 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r5, @ANYBLOB="08000000000000002000128008000100767469001400028008000e000600000008000100", @ANYRES32=r5], 0x40}}, 0x0)

03:12:55 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x60}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="25bc0974769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xfccf, 0x400}, {&(0x7f00000000c0)="c9e7c4603134cd6157d355da6dcd484917a2fc8f6ad0506c6a8f50556435737f15c3564994960e1363cd0d742b3c7e6cc4abf7944e71eea8894a07df14ad11015bba431b604bb351bcdc04daf28750f364e810356f0cc47dc1d9b0e69a824e037e5cd635d95ee0b7aa9ba3a2cb9fad607a88772c5df15870ce9a3ace64f6b94a77", 0x81, 0x6}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000009c0da16b79a7df3636d852abb7d33fc331fd12658094fc07a6ecc6d9b3fcc900101f55cf216be6a74f936e605f691c9ef2d98618044abd402cb6b3c2ff38ac000039fa9eb697b0f618edd0a878d9de28d071a6edc22bd6d3419ca6cf748165d34b05b65a48c06c89d410d0261bf3e5fd7cde2d1e2e75f17fe0f68fcfd68bdd6987315fd009f2ec204519048f79fe5612ed6b519eaed6161b8f61c98b2ef29f2995e57453bdcac3f8093116a549c86d0cee72fd483d5e3fcd8109f190b0fe4fc44d0c8cc0f0ada1eee921921b47e5595e2125ea4ad6627dbb74e5870fa0f03f2a387a6e41"])

03:12:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

03:12:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
read(r1, &(0x7f00000003c0)=""/205, 0xcd)

03:12:55 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x3, 0xfffffffd)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x43a1, 0x7f})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getflags(r1, 0x3)
r2 = socket$inet6(0xa, 0x80000, 0x7)
getsockopt$inet6_int(r2, 0x29, 0x19, 0x0, &(0x7f0000013000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

[  325.460109][T11772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, and O_DIRECT support!
03:12:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6(0xa, 0x803, 0x2)
socket$tipc(0x1e, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8)
sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0)

[  325.612551][T11772] EXT4-fs (loop5): invalid inodes per group: 242029655
[  325.612551][T11772] 
[  325.758502][T11788] EXT4-fs (loop5): invalid inodes per group: 242029655
[  325.758502][T11788] 
03:12:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:56 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x3, 0xfffffffd)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x43a1, 0x7f})
r1 = socket$inet6(0xa, 0x80000, 0x7)
getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000013000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

03:12:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x3c, 0x0, @local, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)

03:12:57 executing program 3:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss, @timestamp, @mss, @window={0x3, 0x3}], 0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="25bc0974769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xfccf, 0x400}, {&(0x7f00000000c0)="c9e7c4603134cd6157d355da6dcd484917a2fc8f6ad0506c6a8f50556435737f15c3564994960e1363cd0d742b3c7e6cc4abf7944e71eea8894a07df14ad11015bba431b604bb351bcdc04daf28750f364e810356f0cc47dc1d9b0e69a824e037e5cd635d95ee0b7aa9ba3a2cb9fad607a88772c5df15870ce9a3ace64f6b94a77", 0x81, 0x6}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000800000009c0da16b79a7df3636d852abb7d33fc331fd12658094fc07a6ecc6d9b3fcc900101f55cf216be6a74f936e605f691c9ef2d98618044abd402cb6b3c2ff38ac000039fa9eb60200f618edd0a878d9de28d071a6edc22bd6d3419ca6cf748165d34b05b65a48c06c89d410d0261bf3e5fd7cde2d1e2e75f17fe0f68fcfd68bdd6987315fd009f2ec204519048f79fe5612ed6b519eaed6161b8f61c98b2ef29f2995e57453bdcac3f8093116a549c86d0cee72fd483d5e3fcd8109f190b0fe4fc44d0c8cc0f0ada1eee921921b47e5595e2125ea4ad6627dbb74e5870fa0f03f2a387a6e41c88c6b1119d4c4197d3706942dab5f169a0afd533eb4c07b57970b36b66224bd90ddac2e91e9997b73a0890735d530a08509eea14e9fba8b3abcd7f14a444be841d711aaaa31b35310a69700df4638eea66fa9572872b56275b5bec93fecbe20b3eb4ebc107b752c1b426d7ae27979766399087d62bf274876c1def1953aa9"])

03:12:57 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, r2, 0xf2b, 0x0, 0x0, {0x67}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x10}]}, 0x1c}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4)
r4 = socket(0x100000000011, 0x2, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000200)=0x68)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, 0x0, 0x0, 0x4)
r6 = syz_io_uring_complete(r1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000))
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x8, @dev}})

03:12:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:57 executing program 5:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss, @timestamp, @mss, @sack_perm, @window], 0x5)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="25bc0974769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xfccf, 0x400}, {&(0x7f00000000c0)="c9e7c4603134cd6157d355da6dcd484917a2fc8f6ad0506c6a8f50556435737f15c3564994960e1363cd0d742b3c7e6cc4abf7944e71eea8894a07df14ad11015bba431b604bb351bcdc04daf28750f364e810356f0cc47dc1d9b0e69a824e037e5cd635d95ee0b7aa9ba3a2cb9fad607a88772c5df15870ce9a3ace64f6b94a77", 0x81, 0x6}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000800000009c0da16b79a7df3636d852abb7d33fc331fd12658094fc07a6ecc6d9b3fcc900101f55cf216be6a74f936e605f691c9ef2d98618044abd402cb6b3c2ff38ac000039fa9eb60200f618edd0a878d9de28d071a6edc22bd6d3419ca6cf748165d34b05b65a48c06c89d410d0261bf3e5fd7cde2d1e2e75f17fe0f68fcfd68bdd6987315fd009f2ec204519048f79fe5612ed6b519eaed6161b8f61c98b2ef29f2995e57453bdcac3f8093116a549c86d0cee72fd483d5e3fcd8109f190b0fe4fc44d0c8cc0f0ada1eee921921b47e5595e2125ea4ad6627dbb74e5870fa0f03f2a387a6e41c88c6b1119d4c4197d3706942dab5f169a0afd533eb4c07b57970b36b66224bd90ddac2e91e9997b73a0890735d530a08509eea14e9fba8b3abcd7f14a444be841d711aaaa31b35310a69700df4638eea66fa9572872b56275b5bec93fecbe20b3eb4ebc107b752c1b426d7ae27979766399087d62bf274876c1def1953aa9"])

[  326.859374][T11822] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  326.955838][T11822] EXT4-fs (loop3): invalid inodes per group: 242029655
[  326.955838][T11822] 
03:12:57 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$RTC_PIE_ON(r0, 0x7005)

[  327.050839][T11822] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  327.069024][T11822] EXT4-fs (loop3): invalid inodes per group: 242029655
[  327.069024][T11822] 
03:12:57 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000013000))

03:12:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2}, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}}, 0x48040)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, 'security.capability\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:12:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x15b, 0xde7e}, {0x0, 0x2a1}]}, 0x14, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}}, 0x48040)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x0, 0x10, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, 'security.capability\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:12:58 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @rand_addr=0x2000000}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x0, @rand_addr=0xfe000000}})

[  327.544577][T11842] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  327.553841][T11842] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (1)
[  327.625080][T11842] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  327.634950][T11842] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (1)
03:12:58 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x3, 0xfffffffd)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x4, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0x8, 0x43a1, 0x7f})
r1 = socket$inet6(0xa, 0x80000, 0x7)
getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000013000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

03:12:58 executing program 0:
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00')
syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x44000)

03:12:58 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x36, 0x0, &(0x7f0000013000))

03:12:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:58 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss, @timestamp, @mss, @sack_perm, @window={0x3, 0x3}], 0x5)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="25bc0974769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d257146d0e0206e73ba8f4952bedc6760253ef", 0xfccf, 0x400}, {&(0x7f00000000c0)="c9e7c4603134cd6157d355da6dcd484917a2fc8f6ad0506c6a8f50556435737f15c3564994960e1363cd0d742b3c7e6cc4abf7944e71eea8894a07df14ad11015bba431b604bb351bcdc04daf28750f364e810356f0cc47dc1d9b0e69a824e037e5cd635d95ee0b7aa9ba3a2cb9fad607a88772c5df15870ce9a3ace64f6b94a77", 0x81, 0x6}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])

03:12:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x15b, 0xde7e}, {0x0, 0x2a1}]}, 0x14, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}}, 0x48040)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x0, 0x10, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, 'security.capability\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:12:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}, {&(0x7f00000004c0)=""/115, 0x73}], 0x3, &(0x7f0000000540)=""/48, 0x30}, 0x5}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="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"]}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3)
sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

[  328.264515][ T1453] tipc: TX() has been purged, node left!
[  328.283715][T11885] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  328.293109][T11885] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (1)
[  328.443522][T11896] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  328.452915][T11896] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (1)
03:12:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x15b, 0xde7e}, {0x0, 0x2a1}]}, 0x14, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008000800ffffffff14000600fe880000000000000000000000000001080007007f0000010800020000000000"], 0x5c}}, 0x48040)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x0, 0x10, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, 'security.capability\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:12:59 executing program 5:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
dup(0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
clock_gettime(0x5, &(0x7f0000000180))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

03:12:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x7fff)

03:12:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:59 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000013000))

03:12:59 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x400)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r2, 0x50, 0x0, 0x4003fe)

03:12:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0)

03:12:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:12:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x7fff)

03:13:00 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x0, @rand_addr=0xfe000000}})

03:13:00 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x2c}}, 0x0)

03:13:00 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/171, 0xab}], 0x1, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

03:13:00 executing program 3:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\trus\xac\x84c-sgrVex:De', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x15b, 0xde7e}, {0x0, 0x2a1}]}, 0x14, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000125bd7000fbdbdf25080000000800020007000000140005000000000000000000000000000000000008"], 0x5c}}, 0x48040)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x0, 0x10, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x18, 0x1, 'security.capability\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:13:00 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev}, {}, 0x104})

03:13:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"06000000dd245c8410000040c9c8dc1964325fa96fa42b76100000002bec0ba41f0100003a40c8a4100000003b00041f01000000003c5ca2c2000000ee377abaece6b88378e3d63a9f000040361d264ffa8b46485f02baee450300004252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525a72f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa006a832d309fcda5bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478fbe654490bc57d95f126c1bb1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e69aff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684364673dcfa9235f05a2ff23c4bb5c5acb2e8976dcac779ff000000000000003d4e185afe28b774b99d38c90937428617de4cdd6f53c419ce31054182fd898af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e9605ab8c3c43840abd17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b2d9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba16f70f558b2246ad95ccf7d3f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3efb254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f47692613e28387e955722908dd88b56163be8312ff47c5b6f070072975af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:13:00 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3fe, 0x4)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x80000008, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[  330.274301][T11973] kvm [11970]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x3ad6e37883b8e6ec
03:13:00 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12)
unlink(&(0x7f0000000680)='./file0\x00')
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
umount2(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = dup3(r1, r2, 0x0)
mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x0)

03:13:00 executing program 3:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800008f48d51d98565dfd27001e00fc02000000ab4111000000001a070800f899e5e5130d192939a9620600736e3f373f5009cad26c1cd38a4ecca73e7570768a301ae2659295d819c30ac8f6f5b38dde334065675af86152e31235be56e4b660decefaa134e1afca928abb3e13cb3088def07f59b0b7168ae6fab4bc104a14021eb7824cb67cefd42fbac3537783adf45e7b5fd91a697970466e577260c3daff49cce9151798debdfb", @ANYRESDEC, @ANYBLOB='\x00t \x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC, @ANYBLOB="4442ec9be81f67d2d682d71248b76ceb8a1d54c2556d340000000080030000c976d8c55926571dfba0fb92e5eac0833393e519060d4a74f49bde66d38d71cfc01d7637fbaeb49e0225f237d1747902fd2d78a8e17788dd5283b2e235999e4ec5e9bb9e5c6f6f1d881d1bde25e53cbe03aef58550a991724d864e5419b159e58970e4c2b404f3b4120f4d67e59aeeed7eed31d61c826360aceb422391606f73cf08e9d4238256a3b961cf697487dbe8df84b9930c9ae7b4c5358b2a32007d922b1d179895db7c37666091e15ff45b65f03d9b8da005718e04f684fec354da83cf23f432a37c78bcfd546f9d94a5111e0e9966"], 0x28}, 0x1, 0x0, 0x0, 0x40400c4}, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>r3})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003d8ea417d64434aba91028f44df429d4fbf828cb010100002996c8297c2b944a68f01df8c9b3db05a879fa231372a9b8aae78d73e09c2d17ff5b282aeb709ed4c9e3926876aa0e6705c0c0b762115bfb1a4be7c3d2d1d9c1c30400000000000000e9f01348810e000000009fcfed2c1be29bf009d5247878362a732ddf51b0cb2fc2d29bc3e98bea5283508d9c385ed0a798c41b3420a331216421591c178531f2977679c2ba9a23f0e0f20c5221e8f5f70ad432d154bd131c135301dae7a5bb22a15b", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250b000000080031000200000008002b000100010005002f000000000008000300", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008090)
r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r5, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0)
keyctl$negate(0xd, r0, 0x1, r5)
unshare(0x28000000)
r6 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e000003, 0x0, @perf_config_ext={0x5, 0x1ff}, 0x40000, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x200000)
mq_getsetattr(r6, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x0)

[  330.337892][T11979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
03:13:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:13:01 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xd0, 0xd0, 0xd0, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'bridge_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="d7ead0b1e3fa"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000340)={'syz0'}, 0x4)
sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001480)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50f5f38706578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed821fc508c36f8419d029c078411a42338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb", 0xc9}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b728e5032c69cf8ebe9d42dd43d2f19d09e91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07fcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee771490", 0xaf}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c", 0x21}], 0x2}}], 0x1, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

03:13:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x20002, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

03:13:01 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x121}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1d)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

03:13:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000000240)={"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"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

03:13:01 executing program 1:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0)
sendfile(r1, r0, 0x0, 0x283)

03:13:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}})
write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x15}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0x1, "b90004"}}}}}, 0x2e)

03:13:02 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f0000002640)={[{@user_xattr='user_xattr'}], [{@fsname={'fsname'}}]})

03:13:02 executing program 5:
syz_genetlink_get_family_id$ethtool(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sched_rr_get_interval(0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0xc0c0583b, &(0x7f0000000080))
syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x80800)

[  332.000975][T12036] =====================================================
[  332.007983][T12036] BUG: KMSAN: uninit-value in sctp_ootb_pkt_new+0x202/0x540
[  332.015269][T12036] CPU: 1 PID: 12036 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0
[  332.024111][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  332.034344][T12036] Call Trace:
[  332.037647][T12036]  dump_stack+0x1df/0x240
[  332.041977][T12036]  kmsan_report+0xf7/0x1e0
[  332.046388][T12036]  __msan_warning+0x58/0xa0
[  332.050896][T12036]  sctp_ootb_pkt_new+0x202/0x540
[  332.055840][T12036]  sctp_sf_tabort_8_4_8+0xe6/0x7e0
[  332.060955][T12036]  sctp_sf_do_5_1B_init+0x6be/0x1b60
[  332.066233][T12036]  ? kmsan_get_metadata+0x4f/0x180
[  332.071349][T12036]  sctp_do_sm+0x2b4/0x9a60
[  332.075765][T12036]  ? stack_depot_save+0x382/0x490
[  332.080968][T12036]  ? sctp_sf_pdiscard+0x210/0x210
[  332.086072][T12036]  ? sctp_init_addrs+0xd7/0xf0
[  332.090829][T12036]  ? sctp_rcv+0x443e/0x5410
[  332.095328][T12036]  ? ip_protocol_deliver_rcu+0x700/0xbc0
[  332.101047][T12036]  ? ip_local_deliver+0x62a/0x7c0
[  332.106223][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.111442][T12036]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  332.117353][T12036]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  332.124300][T12036]  ? skb_pull+0x14a/0x240
[  332.129120][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.134861][T12036]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  332.140894][T12036]  ? __msan_metadata_ptr_for_store_2+0x13/0x20
[  332.147447][T12036]  ? sctp_inq_pop+0x135d/0x1870
[  332.152923][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.158415][T12036]  ? __msan_get_context_state+0x9/0x20
[  332.164189][T12036]  ? sctp_auth_recv_cid+0xb3/0x370
[  332.169581][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.175219][T12036]  sctp_endpoint_bh_rcv+0xd54/0xfe0
[  332.180511][T12036]  ? sctp_endpoint_is_peeled_off+0x210/0x210
[  332.186488][T12036]  sctp_inq_push+0x306/0x430
[  332.191212][T12036]  sctp_rcv+0x48b9/0x5410
[  332.195646][T12036]  ? ipvlan_nf_input+0xd6/0x4b0
[  332.201271][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.206720][T12036]  ? sctp_csum_combine+0xa0/0xa0
[  332.211649][T12036]  ip_protocol_deliver_rcu+0x700/0xbc0
[  332.217292][T12036]  ip_local_deliver+0x62a/0x7c0
[  332.222599][T12036]  ? ip_local_deliver+0x7c0/0x7c0
[  332.227659][T12036]  ? ip_protocol_deliver_rcu+0xbc0/0xbc0
[  332.233317][T12036]  ip_rcv+0x6cf/0x750
[  332.237394][T12036]  ? ip_rcv_core+0x12c0/0x12c0
[  332.242154][T12036]  ? ip_local_deliver_finish+0x350/0x350
[  332.247780][T12036]  netif_receive_skb+0xc5b/0xff0
[  332.252721][T12036]  tun_get_user+0x6df8/0x72f0
[  332.257412][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.262616][T12036]  tun_chr_write_iter+0x1f2/0x360
[  332.267646][T12036]  ? tun_chr_read_iter+0x460/0x460
[  332.272848][T12036]  vfs_write+0xd98/0x1480
[  332.277300][T12036]  ksys_write+0x267/0x450
[  332.281754][T12036]  __se_sys_write+0x92/0xb0
[  332.286271][T12036]  ? __se_sys_write+0xb0/0xb0
[  332.290957][T12036]  __ia32_sys_write+0x4a/0x70
[  332.295635][T12036]  __do_fast_syscall_32+0x2aa/0x400
[  332.300938][T12036]  do_fast_syscall_32+0x6b/0xd0
[  332.305781][T12036]  do_SYSENTER_32+0x73/0x90
[  332.310809][T12036]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  332.317138][T12036] RIP: 0023:0xf7f38549
[  332.321298][T12036] Code: Bad RIP value.
[  332.325434][T12036] RSP: 002b:00000000f55320cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  332.333936][T12036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000
[  332.342068][T12036] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  332.350158][T12036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  332.358196][T12036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  332.366154][T12036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  332.374222][T12036] 
[  332.376538][T12036] Uninit was created at:
[  332.380779][T12036]  kmsan_internal_poison_shadow+0x66/0xd0
[  332.386491][T12036]  kmsan_slab_alloc+0x8a/0xe0
[  332.391330][T12036]  __kmalloc_node_track_caller+0xb40/0x1200
[  332.397575][T12036]  __alloc_skb+0x2fd/0xac0
[  332.402003][T12036]  alloc_skb_with_frags+0x18c/0xa70
[  332.407626][T12036]  sock_alloc_send_pskb+0xada/0xc60
[  332.412826][T12036]  tun_get_user+0x10b7/0x72f0
[  332.418646][T12036]  tun_chr_write_iter+0x1f2/0x360
[  332.423768][T12036]  vfs_write+0xd98/0x1480
[  332.428176][T12036]  ksys_write+0x267/0x450
[  332.432496][T12036]  __se_sys_write+0x92/0xb0
[  332.437079][T12036]  __ia32_sys_write+0x4a/0x70
[  332.442172][T12036]  __do_fast_syscall_32+0x2aa/0x400
[  332.447470][T12036]  do_fast_syscall_32+0x6b/0xd0
[  332.452490][T12036]  do_SYSENTER_32+0x73/0x90
[  332.457336][T12036]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  332.464039][T12036] =====================================================
[  332.471060][T12036] Disabling lock debugging due to kernel taint
[  332.477232][T12036] Kernel panic - not syncing: panic_on_warn set ...
[  332.483991][T12036] CPU: 1 PID: 12036 Comm: syz-executor.3 Tainted: G    B             5.8.0-rc5-syzkaller #0
[  332.494613][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  332.504668][T12036] Call Trace:
[  332.507956][T12036]  dump_stack+0x1df/0x240
[  332.512280][T12036]  panic+0x3d5/0xc3e
[  332.516184][T12036]  kmsan_report+0x1df/0x1e0
[  332.520681][T12036]  __msan_warning+0x58/0xa0
[  332.525177][T12036]  sctp_ootb_pkt_new+0x202/0x540
[  332.530116][T12036]  sctp_sf_tabort_8_4_8+0xe6/0x7e0
[  332.535405][T12036]  sctp_sf_do_5_1B_init+0x6be/0x1b60
[  332.540679][T12036]  ? kmsan_get_metadata+0x4f/0x180
[  332.545801][T12036]  sctp_do_sm+0x2b4/0x9a60
[  332.550212][T12036]  ? stack_depot_save+0x382/0x490
[  332.555317][T12036]  ? sctp_sf_pdiscard+0x210/0x210
[  332.560370][T12036]  ? sctp_init_addrs+0xd7/0xf0
[  332.565446][T12036]  ? sctp_rcv+0x443e/0x5410
[  332.569947][T12036]  ? ip_protocol_deliver_rcu+0x700/0xbc0
[  332.575567][T12036]  ? ip_local_deliver+0x62a/0x7c0
[  332.580581][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.585968][T12036]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  332.592155][T12036]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  332.598572][T12036]  ? skb_pull+0x14a/0x240
[  332.603011][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.608198][T12036]  ? kmsan_get_shadow_origin_ptr+0x81/0xb0
[  332.614178][T12036]  ? __msan_metadata_ptr_for_store_2+0x13/0x20
[  332.620634][T12036]  ? sctp_inq_pop+0x135d/0x1870
[  332.625691][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.630987][T12036]  ? __msan_get_context_state+0x9/0x20
[  332.636811][T12036]  ? sctp_auth_recv_cid+0xb3/0x370
[  332.642460][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.648542][T12036]  sctp_endpoint_bh_rcv+0xd54/0xfe0
[  332.653756][T12036]  ? sctp_endpoint_is_peeled_off+0x210/0x210
[  332.659820][T12036]  sctp_inq_push+0x306/0x430
[  332.664494][T12036]  sctp_rcv+0x48b9/0x5410
[  332.669206][T12036]  ? ipvlan_nf_input+0xd6/0x4b0
[  332.674222][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.679819][T12036]  ? sctp_csum_combine+0xa0/0xa0
[  332.684888][T12036]  ip_protocol_deliver_rcu+0x700/0xbc0
[  332.690628][T12036]  ip_local_deliver+0x62a/0x7c0
[  332.695682][T12036]  ? ip_local_deliver+0x7c0/0x7c0
[  332.701207][T12036]  ? ip_protocol_deliver_rcu+0xbc0/0xbc0
[  332.706826][T12036]  ip_rcv+0x6cf/0x750
[  332.710985][T12036]  ? ip_rcv_core+0x12c0/0x12c0
[  332.715737][T12036]  ? ip_local_deliver_finish+0x350/0x350
[  332.721369][T12036]  netif_receive_skb+0xc5b/0xff0
[  332.726685][T12036]  tun_get_user+0x6df8/0x72f0
[  332.731553][T12036]  ? kmsan_get_metadata+0x11d/0x180
[  332.736939][T12036]  tun_chr_write_iter+0x1f2/0x360
[  332.741960][T12036]  ? tun_chr_read_iter+0x460/0x460
[  332.747149][T12036]  vfs_write+0xd98/0x1480
[  332.752370][T12036]  ksys_write+0x267/0x450
[  332.756791][T12036]  __se_sys_write+0x92/0xb0
[  332.761412][T12036]  ? __se_sys_write+0xb0/0xb0
[  332.766173][T12036]  __ia32_sys_write+0x4a/0x70
[  332.770842][T12036]  __do_fast_syscall_32+0x2aa/0x400
[  332.776127][T12036]  do_fast_syscall_32+0x6b/0xd0
[  332.780965][T12036]  do_SYSENTER_32+0x73/0x90
[  332.785459][T12036]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  332.791770][T12036] RIP: 0023:0xf7f38549
[  332.795830][T12036] Code: Bad RIP value.
[  332.799971][T12036] RSP: 002b:00000000f55320cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  332.808818][T12036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000
[  332.817297][T12036] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  332.825556][T12036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  332.836299][T12036] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  332.844263][T12036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  332.854006][T12036] Kernel Offset: 0x2b800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  332.865738][T12036] Rebooting in 86400 seconds..