_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1019.541841][ T4429] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1019.731981][ T4429] usb 4-1: device descriptor read/64, error 18
[ 1019.856309][ T4429] usb usb4-port1: attempt power cycle
[ 1020.281202][ T4429] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1020.451735][ T4429] usb 4-1: device descriptor read/8, error -61
[ 1020.721242][ T4429] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1020.896440][ T4429] usb 4-1: device descriptor read/8, error -61
[ 1021.021999][ T4429] usb usb4-port1: unable to enumerate USB device
23:47:08 executing program 3:
shutdown(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x6) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (rerun: 32)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r3) (async)
syz_usb_disconnect(r3) (async)
r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r4)
syz_usb_disconnect(r4) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000003300)=ANY=[@ANYBLOB="010000fea47b16400b0000", @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="fa4f8200430cbf21bf50b84dd52025d1a3e200e258e9faf5de7630d74092d9e4fe82f2296197ee5e924cdf6d9f56840abb436f3f19b62bc7dbdbeff4dc36a30559", @ANYRESDEC=r4]) (async, rerun: 32)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x80000001) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) (async)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0xa0800) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (rerun: 64)

23:47:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0)

23:47:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x3}, 0x0)

[ 1022.281109][ T4429] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1022.472044][ T4429] usb 4-1: device descriptor read/64, error 18
23:47:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1022.751508][ T4429] usb 4-1: new high-speed USB device number 38 using dummy_hcd
23:47:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[ 1022.944492][ T4429] usb 4-1: device descriptor read/64, error 18
[ 1023.073620][ T4429] usb usb4-port1: attempt power cycle
[ 1023.481186][ T4429] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1023.676960][ T4429] usb 4-1: device descriptor read/8, error -61
[ 1023.961213][ T4429] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1024.161497][ T4429] usb 4-1: device descriptor read/8, error -61
[ 1024.282291][ T4429] usb usb4-port1: unable to enumerate USB device
23:47:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)

23:47:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:12 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080))
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00002fe000/0x4000)=nil})
mremap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00003ba000/0x4000)=nil)

23:47:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x0)

[ 1025.310546][T18229] binder: BINDER_SET_CONTEXT_MGR already set
[ 1025.316975][T18229] binder: 18224:18229 ioctl 4018620d 20000080 returned -16
[ 1025.425742][T18237] binder: 18224:18237 ioctl 4028641b 20000000 returned -22
23:47:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x7}, 0x0)

23:47:12 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r0, r2, 0x0) (async)
r3 = dup3(r0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080))
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00002fe000/0x4000)=nil}) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00002fe000/0x4000)=nil})
mremap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00003ba000/0x4000)=nil)

23:47:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0)

[ 1026.096036][T18245] binder: BINDER_SET_CONTEXT_MGR already set
[ 1026.102493][T18245] binder: 18241:18245 ioctl 40046207 0 returned -16
[ 1026.201736][T18243] binder: 18241:18243 ioctl 4028641b 20000000 returned -22
[ 1026.283030][T18245] binder: 18241:18245 ioctl 4028641b 20000000 returned -22
23:47:13 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000000040), 0x6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r1, r0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r0, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080))
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00002fe000/0x4000)=nil})
mremap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00003ba000/0x4000)=nil) (async)
mremap(&(0x7f0000569000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00003ba000/0x4000)=nil)

23:47:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x0)

23:47:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1027.112872][T18275] binder: 18273:18275 ioctl 4028641b 20000000 returned -22
23:47:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xf}, 0x0)

23:47:14 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x35)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x800800, 0x0)
r6 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc0, 0x0, &(0x7f00000004c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/125, 0x7d, 0x0, 0x40}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/135, 0x87, 0x1, 0x16}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/86, 0x56, 0x0, 0x14}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @clear_death, @clear_death={0x400c630f, 0x3}], 0x25, 0x0, &(0x7f0000000580)="6dc2fb2c944c3535d67c5b3b1b44fae4817ab247f8e86c81e2a1089088ca6f8c57f15db5a3"})
r7 = dup3(r1, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057a000/0x4000)=nil, 0x4000}, 0x1})

23:47:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x28}, 0x0)

[ 1027.895005][T18301] binder: 18300:18301 ioctl c020aa04 20000000 returned -22
23:47:15 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x35)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r1) (async)
dup2(r2, r1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x4) (async)
mprotect(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x800800, 0x0)
r6 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc0, 0x0, &(0x7f00000004c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/125, 0x7d, 0x0, 0x40}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/135, 0x87, 0x1, 0x16}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/86, 0x56, 0x0, 0x14}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @clear_death, @clear_death={0x400c630f, 0x3}], 0x25, 0x0, &(0x7f0000000580)="6dc2fb2c944c3535d67c5b3b1b44fae4817ab247f8e86c81e2a1089088ca6f8c57f15db5a3"})
r7 = dup3(r1, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057a000/0x4000)=nil, 0x4000}, 0x1}) (async)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057a000/0x4000)=nil, 0x4000}, 0x1})

23:47:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x3c}, 0x0)

23:47:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1028.688302][T18317] binder: 18315:18317 ioctl c020aa04 20000000 returned -22
[ 1028.736666][T18316] binder: 18315:18316 ioctl c020aa04 20000000 returned -22
23:47:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(0x0, 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:16 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x35)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
dup2(r2, r1)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x800800, 0x0)
r6 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc0, 0x0, &(0x7f00000004c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/125, 0x7d, 0x0, 0x40}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/135, 0x87, 0x1, 0x16}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/86, 0x56, 0x0, 0x14}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @clear_death, @clear_death={0x400c630f, 0x3}], 0x25, 0x0, &(0x7f0000000580)="6dc2fb2c944c3535d67c5b3b1b44fae4817ab247f8e86c81e2a1089088ca6f8c57f15db5a3"})
r7 = dup3(r1, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057a000/0x4000)=nil, 0x4000}, 0x1})
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x35) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
dup2(r2, r1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) (async)
mprotect(&(0x7f0000348000/0x4000)=nil, 0x4000, 0x4) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x800800, 0x0) (async)
socket$bt_bnep(0x1f, 0x3, 0x4) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc0, 0x0, &(0x7f00000004c0)=[@register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/125, 0x7d, 0x0, 0x40}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/135, 0x87, 0x1, 0x16}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/86, 0x56, 0x0, 0x14}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @clear_death, @clear_death={0x400c630f, 0x3}], 0x25, 0x0, &(0x7f0000000580)="6dc2fb2c944c3535d67c5b3b1b44fae4817ab247f8e86c81e2a1089088ca6f8c57f15db5a3"}) (async)
dup3(r1, r3, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)) (async)
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057a000/0x4000)=nil, 0x4000}, 0x1}) (async)

23:47:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x0)

[ 1029.238437][T18334] binder: 18333:18334 ioctl c020aa04 20000000 returned -22
[ 1029.335726][T18334] binder: BINDER_SET_CONTEXT_MGR already set
[ 1029.342753][T18334] binder: 18333:18334 ioctl 40046207 0 returned -16
[ 1029.377245][T18326] kvm: kvm [18321]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x186) = 0x200004407
[ 1029.459750][T18326] kvm: kvm [18321]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x187) = 0x3000044b2
23:47:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0)

23:47:16 executing program 3:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r1 = fcntl$getown(r0, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x1, 0x1, 0x5, 0x5, 'syz1\x00', 0x101}, 0x1, 0x100, 0x7, r1, 0x8, 0x40, 'syz0\x00', &(0x7f0000000080)=['', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x59})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x400, 0x9, 'syz1\x00', 0x400}, 0x6, 0x4, 0x7f, r1, 0x9, 0xff, 'syz0\x00', &(0x7f0000000300)=['syz1\x00', '\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', 'syz0\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)'], 0x5d})
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x20000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x80000001, 0x9, 0x401, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x5}, 0x48)
sendfile(r2, r3, &(0x7f00000002c0), 0x7)
shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r4=>r2, {0x0, 0xffffffffffffffff}}, './file0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000004c0)="968b129b09065a77591df353e04d9dfc48203aea998ff540bd0a3180df6eda6f69dad659648e2fb0994240fd38e4b8c708724d73bb03fac485fd38ce93d006da7e4780f3963546f4ab777f2a1499360ad4e3ed1824a5b24284ae9d0c7b8dd0821cc4bd21bab27c47ab8c3c8aaf89b2741acf239218ff85e862d5b8fb2fdbf747e3cfa2c78cbedd3164ce761f9720a46b0efb0b6f9e596d022b9d7203aecdffc41bbe09eecd4d5bffd6f86c884b6f35d6d6e4a8337678fdbebc1075f2e0d022a5189791e22f098af5031be16d2fbbfff8487b41e2c2d2b1408c01a954226280b1db", &(0x7f00000005c0)=""/129, &(0x7f0000000680)="95ef5ba034df4cab1e562326683f23dbf30b9b8627", &(0x7f00000006c0)="8127cd0758e7346187a0f6ef3cbc6d", 0x75380, r4}, 0x38)

[ 1029.580346][T18326] kvm: kvm [18321]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x11e) = 0x400004483
[ 1029.602990][T18337] kvm: kvm [18335]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1030.000138][T18357] snd_dummy snd_dummy.0: control 1:5:5:syz1:257 is already present
23:47:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x421}, 0x0)

23:47:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(0x0, 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:17 executing program 3:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r1 = fcntl$getown(r0, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x1, 0x1, 0x5, 0x5, 'syz1\x00', 0x101}, 0x1, 0x100, 0x7, r1, 0x8, 0x40, 'syz0\x00', &(0x7f0000000080)=['', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x59})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x400, 0x9, 'syz1\x00', 0x400}, 0x6, 0x4, 0x7f, r1, 0x9, 0xff, 'syz0\x00', &(0x7f0000000300)=['syz1\x00', '\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', 'syz0\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)'], 0x5d})
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x20000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x80000001, 0x9, 0x401, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x5}, 0x48)
sendfile(r2, r3, &(0x7f00000002c0), 0x7)
shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r4=>r2, {0x0, 0xffffffffffffffff}}, './file0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000004c0)="968b129b09065a77591df353e04d9dfc48203aea998ff540bd0a3180df6eda6f69dad659648e2fb0994240fd38e4b8c708724d73bb03fac485fd38ce93d006da7e4780f3963546f4ab777f2a1499360ad4e3ed1824a5b24284ae9d0c7b8dd0821cc4bd21bab27c47ab8c3c8aaf89b2741acf239218ff85e862d5b8fb2fdbf747e3cfa2c78cbedd3164ce761f9720a46b0efb0b6f9e596d022b9d7203aecdffc41bbe09eecd4d5bffd6f86c884b6f35d6d6e4a8337678fdbebc1075f2e0d022a5189791e22f098af5031be16d2fbbfff8487b41e2c2d2b1408c01a954226280b1db", &(0x7f00000005c0)=""/129, &(0x7f0000000680)="95ef5ba034df4cab1e562326683f23dbf30b9b8627", &(0x7f00000006c0)="8127cd0758e7346187a0f6ef3cbc6d", 0x75380, r4}, 0x38)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
fcntl$getown(r0, 0x9) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x1, 0x1, 0x5, 0x5, 'syz1\x00', 0x101}, 0x1, 0x100, 0x7, r1, 0x8, 0x40, 'syz0\x00', &(0x7f0000000080)=['', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x59}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x400, 0x9, 'syz1\x00', 0x400}, 0x6, 0x4, 0x7f, r1, 0x9, 0xff, 'syz0\x00', &(0x7f0000000300)=['syz1\x00', '\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', 'syz0\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)'], 0x5d}) (async)
syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x20000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x80000001, 0x9, 0x401, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x5}, 0x48) (async)
sendfile(r2, r3, &(0x7f00000002c0), 0x7) (async)
shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000004c0)="968b129b09065a77591df353e04d9dfc48203aea998ff540bd0a3180df6eda6f69dad659648e2fb0994240fd38e4b8c708724d73bb03fac485fd38ce93d006da7e4780f3963546f4ab777f2a1499360ad4e3ed1824a5b24284ae9d0c7b8dd0821cc4bd21bab27c47ab8c3c8aaf89b2741acf239218ff85e862d5b8fb2fdbf747e3cfa2c78cbedd3164ce761f9720a46b0efb0b6f9e596d022b9d7203aecdffc41bbe09eecd4d5bffd6f86c884b6f35d6d6e4a8337678fdbebc1075f2e0d022a5189791e22f098af5031be16d2fbbfff8487b41e2c2d2b1408c01a954226280b1db", &(0x7f00000005c0)=""/129, &(0x7f0000000680)="95ef5ba034df4cab1e562326683f23dbf30b9b8627", &(0x7f00000006c0)="8127cd0758e7346187a0f6ef3cbc6d", 0x75380, r4}, 0x38) (async)

[ 1030.606830][T18380] snd_dummy snd_dummy.0: control 1:5:5:syz1:257 is already present
23:47:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x500}, 0x0)

[ 1030.778032][T18365] kvm: kvm [18361]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1030.893483][T18369] kvm: kvm [18366]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:18 executing program 3:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r1 = fcntl$getown(r0, 0x9)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x1, 0x1, 0x5, 0x5, 'syz1\x00', 0x101}, 0x1, 0x100, 0x7, r1, 0x8, 0x40, 'syz0\x00', &(0x7f0000000080)=['', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)', '\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x59})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x400, 0x9, 'syz1\x00', 0x400}, 0x6, 0x4, 0x7f, r1, 0x9, 0xff, 'syz0\x00', &(0x7f0000000300)=['syz1\x00', '\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', '/dev/v4l-subdev#\x00', 'syz0\x00', '\x00', '/dev/snd/controlC#\x00', ':{}}@\x89\xd4^&,)'], 0x5d}) (async)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x20000) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x80000001, 0x9, 0x401, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x5}, 0x48)
sendfile(r2, r3, &(0x7f00000002c0), 0x7) (async)
shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r4=>r2, {0x0, 0xffffffffffffffff}}, './file0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000004c0)="968b129b09065a77591df353e04d9dfc48203aea998ff540bd0a3180df6eda6f69dad659648e2fb0994240fd38e4b8c708724d73bb03fac485fd38ce93d006da7e4780f3963546f4ab777f2a1499360ad4e3ed1824a5b24284ae9d0c7b8dd0821cc4bd21bab27c47ab8c3c8aaf89b2741acf239218ff85e862d5b8fb2fdbf747e3cfa2c78cbedd3164ce761f9720a46b0efb0b6f9e596d022b9d7203aecdffc41bbe09eecd4d5bffd6f86c884b6f35d6d6e4a8337678fdbebc1075f2e0d022a5189791e22f098af5031be16d2fbbfff8487b41e2c2d2b1408c01a954226280b1db", &(0x7f00000005c0)=""/129, &(0x7f0000000680)="95ef5ba034df4cab1e562326683f23dbf30b9b8627", &(0x7f00000006c0)="8127cd0758e7346187a0f6ef3cbc6d", 0x75380, r4}, 0x38)

23:47:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x600}, 0x0)

23:47:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1031.422318][T18393] snd_dummy snd_dummy.0: control 1:5:5:syz1:257 is already present
23:47:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(0x0, 0x7fffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:18 executing program 3:
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000000)=""/48)

23:47:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x700}, 0x0)

[ 1031.887855][T18390] kvm: kvm [18388]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x186) = 0x200004407
[ 1031.921878][T18390] kvm: kvm [18388]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x187) = 0x3000044b2
[ 1032.005004][T18390] kvm: kvm [18388]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x11e) = 0x400004483
[ 1032.117049][T18400] kvm: kvm [18397]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:19 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80)={<r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, &(0x7f0000000d40))

23:47:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x900}, 0x0)

23:47:19 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:19 executing program 3:
getrusage(0x1, &(0x7f0000001100))

23:47:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

23:47:20 executing program 3:
io_setup(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000200))

23:47:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1033.305154][T18437] kvm_intel: kvm [18432]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1033.317062][T18430] kvm_intel: kvm [18427]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x1d9) = 0x20000f0c3
23:47:20 executing program 3:
add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x3}, &(0x7f0000000d80)="b8", 0x1, 0xfffffffffffffffb)

23:47:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2104}, 0x0)

23:47:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:21 executing program 3:
pipe(&(0x7f0000000d80)={<r0=>0xffffffffffffffff})
fchown(r0, 0x0, 0x0)

23:47:21 executing program 3:
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)

23:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2800}, 0x0)

[ 1034.589179][T18468] kvm_intel: kvm [18462]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1034.624674][T18463] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed
[ 1034.624741][T18463] kvm: kvm [18461]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1034.788260][T18471] kvm_intel: kvm [18465]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x1d9) = 0x20000f0c3
23:47:22 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d80)=0xffffffffffffffff, 0x4)

23:47:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x3c00}, 0x0)

23:47:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:22 executing program 3:
io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x989680}, 0x0)

23:47:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

23:47:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1036.206888][T18496] kvm_intel: kvm [18493]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1036.405031][T18505] kvm_intel: kvm [18497]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x1d9) = 0x20000f0c3
23:47:23 executing program 3:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x200)

23:47:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60ff}, 0x0)

23:47:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:24 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002dc0)='/sys/block/loop0', 0x0, 0x0)

23:47:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xff00}, 0x0)

23:47:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

23:47:24 executing program 3:
io_setup(0x1, &(0x7f00000008c0))

23:47:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

23:47:24 executing program 3:
add_key$user(&(0x7f0000001780), &(0x7f00000017c0)={'syz', 0x0}, &(0x7f0000001800)="a2", 0x1, 0xfffffffffffffffd)

23:47:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1038.016134][T18545] kvm_intel: kvm [18539]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x1d9) = 0x20000f0c3
23:47:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

23:47:25 executing program 3:
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880))

23:47:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

23:47:26 executing program 3:
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x0, 0x0)

23:47:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

23:47:26 executing program 3:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001b80), 0x200002, 0x0)

23:47:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

23:47:26 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0)
io_setup(0x1, &(0x7f0000000000)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

23:47:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

23:47:27 executing program 3:
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff7000/0x8000)=nil)

23:47:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:27 executing program 3:
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0)
stat(0x0, 0x0)
add_key$user(0x0, &(0x7f00000017c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)

23:47:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

23:47:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

23:47:28 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:47:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

23:47:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1041.826759][T18648] kvm_intel: kvm [18647]: vcpu0, guest rIP: 0x9782 Unhandled WRMSR(0x1d9) = 0xc00005d81
[ 1041.901366][T18648] kvm_intel: kvm [18647]: vcpu0, guest rIP: 0x9182 Unhandled WRMSR(0x1d9) = 0xc0000441d
23:47:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

23:47:29 executing program 3:
execveat(0xffffffffffffffff, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000f40)=[&(0x7f0000000dc0)='syz0\x00'], &(0x7f0000001040)=[&(0x7f0000000f80)=',\x00', &(0x7f0000000fc0)='\x00', 0x0], 0x400)

23:47:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

23:47:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:29 executing program 3:
syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000)
mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x800)

23:47:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

23:47:30 executing program 3:
syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000)
mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x800)

23:47:30 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:30 executing program 3:
syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000)
mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x800)

23:47:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x21040000}, 0x0)

23:47:30 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:31 executing program 3:
syz_open_dev$sndpcmp(&(0x7f0000000540), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000)
mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x800)

23:47:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000000}, 0x0)

23:47:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1044.436215][T18721] kvm_intel: kvm [18715]: vcpu0, guest rIP: 0x9782 Unhandled WRMSR(0x1d9) = 0xc00005d81
[ 1044.519898][T18721] kvm_intel: kvm [18715]: vcpu0, guest rIP: 0x9182 Unhandled WRMSR(0x1d9) = 0xc0000441d
23:47:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x3c000000}, 0x0)

23:47:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:31 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0)

23:47:32 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x61)

23:47:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

23:47:32 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:32 executing program 3:
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0)

23:47:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

23:47:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:33 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

23:47:33 executing program 3:
r0 = syz_usbip_server_init(0x0)
ppoll(&(0x7f0000002500)=[{r0, 0x113}, {r0}], 0x2, 0x0, 0x0, 0x0)

[ 1046.123019][T18759] kvm: kvm [18758]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xff000000}, 0x0)

[ 1046.463672][T18771] kvm: kvm [18768]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1046.531233][T18784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
23:47:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x14001, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xff600000}, 0x0)

[ 1047.034384][T18783] kvm: kvm [18782]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x10000d3c5
23:47:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:34 executing program 3:
r0 = open$dir(&(0x7f0000000700)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000740)=""/146, 0x92)

[ 1047.135777][T18783] kvm: kvm [18782]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x187) = 0x100004ca2
[ 1047.262794][T18792] kvm: kvm [18790]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

23:47:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:34 executing program 3:
r0 = open$dir(&(0x7f0000000700)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000740)=""/146, 0x92)

23:47:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1047.844304][T18804] kvm: kvm [18803]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:35 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:35 executing program 3:
r0 = open$dir(&(0x7f0000000700)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000740)=""/146, 0x92)

23:47:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

23:47:35 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:35 executing program 3:
r0 = open$dir(&(0x7f0000000700)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000740)=""/146, 0x92)

23:47:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

[ 1048.585816][T18816] kvm: kvm [18814]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x10000d3c5
[ 1048.685854][T18816] kvm: kvm [18814]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x187) = 0x100004ca2
[ 1048.715566][T18830] kvm: kvm [18828]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000002a80)={0x2424}, 0x8, 0x0)
dup3(r0, r1, 0x80000)

23:47:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2)

23:47:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})

23:47:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3)

23:47:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1049.765935][T18846] kvm_intel: kvm [18845]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:36 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f00000057c0)=[{{&(0x7f0000000180), 0x6e, 0x0}}], 0x1, 0x43, 0x0)

[ 1049.854121][T18846] kvm_intel: kvm [18845]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000622
23:47:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x4)

[ 1049.907302][T18864] kvm_intel: kvm [18856]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x1d9) = 0x300002027
[ 1049.918902][T18864] kvm: kvm [18856]: vcpu0, guest rIP: 0x9c02 Unhandled WRMSR(0x186) = 0x15000044b1
23:47:37 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x40}, {r0}, {r0}], 0x3, 0x0)

23:47:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x5)

23:47:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:37 executing program 3:
r0 = fanotify_init(0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

23:47:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x6)

23:47:38 executing program 3:
syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', 0x0, 0x0, 0x0)

[ 1051.284702][T18886] kvm_intel: kvm [18883]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1051.381832][T18886] kvm_intel: kvm [18883]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000622
23:47:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x7)

23:47:38 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:39 executing program 3:
syz_clone(0x50000000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)

23:47:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x8)

23:47:39 executing program 3:
open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0)

[ 1052.454889][T18916] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed
[ 1052.454960][T18916] kvm: kvm [18914]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1052.525667][T18930] kvm_intel: kvm [18929]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x9)

[ 1052.682837][T18930] kvm_intel: kvm [18929]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000622
23:47:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:40 executing program 3:
ppoll(0x0, 0x0, &(0x7f0000002b80)={0x0, 0x989680}, 0x0, 0x0)

23:47:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf)

23:47:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:40 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x28)

23:47:40 executing program 3:
r0 = syz_usbip_server_init(0x0)
ppoll(&(0x7f0000002500)=[{r0}], 0x1, 0x0, 0x0, 0x0)

23:47:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3c)

23:47:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1053.682236][T18970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
23:47:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x60)

[ 1054.050120][T18964] kvm_intel: kvm [18962]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x300)

23:47:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x421)

23:47:42 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8003, 0x0)

23:47:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:42 executing program 3:
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x2004)

23:47:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x500)

23:47:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:43 executing program 3:
memfd_create(&(0x7f0000000080)='/dev/udmabuf\x00', 0x3)

23:47:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x600)

23:47:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1056.143578][T19014] kvm: kvm [19013]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:43 executing program 3:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)

23:47:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x700)

23:47:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1056.751931][T19040] kvm_intel: kvm [19038]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:43 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x900)

23:47:44 executing program 3:
syz_clone(0x50000000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)

23:47:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:44 executing program 3:
r0 = landlock_create_ruleset(&(0x7f0000002a80)={0x2424}, 0x8, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000002a80)={0x2424}, 0x8, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000002700)={0x400, r1}, 0x0)

[ 1057.509528][T19061] kvm: kvm [19060]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf00)

23:47:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:45 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f000000b040)='ns/user\x00')

23:47:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2104)

23:47:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:45 executing program 3:
sched_setscheduler(0x0, 0x0, &(0x7f0000001200)=0x5)

23:47:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2800)

23:47:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:46 executing program 3:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, 0x0, 0x4001)

[ 1059.143345][T19096] kvm: kvm [19094]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3c00)

23:47:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="b9e583b4e2070ad85a0fa2"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

23:47:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x6000)

23:47:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1060.093186][T19128] kvm_intel: kvm [19124]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x60ff)

23:47:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xff00)

23:47:47 executing program 3:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}})

[ 1060.805455][T19150] kvm: kvm [19147]: vcpu0, guest rIP: 0x9382 Unhandled WRMSR(0x186) = 0x40000c492
[ 1060.816340][T19150] kvm: kvm [19147]: vcpu0, guest rIP: 0x9402 Unhandled WRMSR(0x187) = 0x500004377
[ 1060.843051][T19150] kvm_intel: kvm [19147]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100003d12
[ 1060.884792][T19146] kvm: kvm [19145]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1061.067997][T19159] kvm_intel: kvm [19158]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1061.163278][T19159] kvm: kvm [19158]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x187) = 0x60000928a
[ 1061.179149][T19159] kvm: kvm [19158]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x11e) = 0x200004418
23:47:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x30000)

23:47:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1061.431548][ T1034] usb 4-1: new high-speed USB device number 41 using dummy_hcd
23:47:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x34000)

[ 1061.882140][ T1034] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.894223][ T1034] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
23:47:49 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1062.112115][ T1034] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40
[ 1062.121705][ T1034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.129948][ T1034] usb 4-1: Product: syz
[ 1062.135386][ T1034] usb 4-1: Manufacturer: syz
[ 1062.141427][ T1034] usb 4-1: SerialNumber: syz
23:47:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x400300)

[ 1062.426800][T19190] kvm_intel: kvm [19186]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
[ 1062.452171][ T1034] usbhid 4-1:1.0: can't add hid device: -22
[ 1062.453498][T19190] kvm: kvm [19186]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x187) = 0x60000928a
23:47:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1062.458627][ T1034] usbhid: probe of 4-1:1.0 failed with error -22
[ 1062.567659][ T1034] usb 4-1: USB disconnect, device number 41
[ 1062.606096][T19190] kvm: kvm [19186]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x11e) = 0x200004418
23:47:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x1000000)

23:47:50 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0)

[ 1063.009726][T19200] kvm: kvm [19198]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1063.364670][T19210] kvm: kvm [19208]: vcpu0, guest rIP: 0x9382 Unhandled WRMSR(0x186) = 0x40000c492
23:47:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2000000)

[ 1063.429115][T19210] kvm: kvm [19208]: vcpu0, guest rIP: 0x9402 Unhandled WRMSR(0x187) = 0x500004377
23:47:50 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

[ 1063.552534][T19210] kvm_intel: kvm [19208]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100003d12
23:47:50 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:51 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}})

23:47:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3000000)

23:47:51 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8937, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:47:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1064.396928][T19227] kvm: kvm [19225]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
23:47:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1064.496972][T19227] kvm: kvm [19225]: vcpu0, guest rIP: 0xab82 Unhandled WRMSR(0x187) = 0x3900005dd1
23:47:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x4000000)

23:47:52 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='sit0\x00'/14, @ANYRES32=0x0, @ANYBLOB="00804a84"]})

23:47:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x5000000)

[ 1065.003731][T19259] kvm: kvm [19248]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1065.066717][T19259] kvm: kvm [19248]: vcpu0, guest rIP: 0xab82 Unhandled WRMSR(0x187) = 0x3900005dd1
[ 1065.081482][T19259] kvm_intel: kvm [19248]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100009509
23:47:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1065.314393][T19252] kvm_intel: kvm [19250]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:52 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x40040c1)

[ 1065.404628][T19252] kvm_intel: kvm [19250]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x1d9) = 0x80000caba
23:47:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x6000000)

23:47:52 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x401c5820, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:47:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x7000000)

23:47:53 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3f, 0x9, 0x2, 0x5, 0x1}, 0x48)

23:47:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1066.200335][T19281] kvm: kvm [19279]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x3000066c2
[ 1066.249398][T19281] kvm: kvm [19279]: vcpu0, guest rIP: 0xab82 Unhandled WRMSR(0x187) = 0x3900005dd1
23:47:53 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, @multicast1, @multicast2}}}})

[ 1066.368168][T19281] kvm_intel: kvm [19279]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100009509
23:47:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x8000000)

23:47:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x9000000)

23:47:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x2c}}, 0x0)

23:47:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf000000)

23:47:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:54 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:47:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1067.656626][T19315] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed
[ 1067.656694][T19315] kvm: kvm [19313]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
23:47:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x21040000)

[ 1067.884340][T19323] kvm_intel: kvm [19322]: vcpu0, guest rIP: 0x9482 Unhandled WRMSR(0x1d9) = 0x6000092db
23:47:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

[ 1068.004951][T19323] kvm_intel: kvm [19322]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x1d9) = 0x80000caba
[ 1068.077236][T19331] kvm: kvm [19329]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
23:47:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x28000000)

23:47:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:55 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0)
r1 = socket(0x8, 0x5, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0xff, 0x4, 0x21, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x80, 0x2, 0x3192}})
pipe(&(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xff, 0x5d43e4d0, 0x64, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000, 0x700, 0x20, 0x8}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)

23:47:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3c000000)

23:47:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1068.993548][T19351] kvm: kvm [19350]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
[ 1069.039373][T19352] kvm: kvm [19349]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x186) = 0x200004407
23:47:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x60000000)

[ 1069.113418][T19352] kvm: kvm [19349]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x187) = 0x3000044b2
23:47:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

[ 1069.201167][T19352] kvm_intel: kvm [19349]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000057
23:47:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf0ffffff)

23:47:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8918, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

23:47:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0)

[ 1069.953518][T19382] kvm: kvm [19381]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
23:47:57 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f4, &(0x7f0000000000)={'sit0\x00', 0x0})

[ 1070.293839][T19388] kvm: kvm [19387]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x186) = 0x200004407
23:47:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xff000000)

[ 1070.378554][T19388] kvm: kvm [19387]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x187) = 0x3000044b2
23:47:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xff600000)

23:47:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1070.497760][T19388] kvm_intel: kvm [19387]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000057
23:47:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1070.692923][T19399] kvm: kvm [19398]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
23:47:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xffffff7f)

23:47:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:58 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}})

23:47:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xfffffff0)

23:47:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1071.388418][T19416] kvm: kvm [19411]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
23:47:58 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890b, 0x0)

23:47:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x60ffffffffff)

23:47:59 executing program 3:
syz_emit_ethernet(0x1a, &(0x7f0000000240)={@local, @remote, @val={@void}, {@llc={0x4, {@snap={0xab, 0x0, "bd", "427818"}}}}}, 0x0)

[ 1071.939810][T19426] kvm_intel: kvm [19425]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100000057
23:47:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:59 executing program 3:
socketpair(0x10, 0x2, 0x8, &(0x7f0000000000))

23:47:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3000000000000)

23:47:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:47:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1}}}})

23:48:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x40030000000000)

[ 1073.376250][T19469] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed
[ 1073.376316][T19469] kvm: kvm [19468]: vcpu0, guest rIP: 0xa002 Unhandled WRMSR(0x187) = 0x1d000044b3
23:48:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1073.476207][T19465] kvm: kvm [19463]: vcpu0, guest rIP: 0x9682 Unhandled WRMSR(0x186) = 0xb000044b2
[ 1073.500510][T19469] kvm_intel: kvm [19468]: vcpu0, guest rIP: 0x9502 Unhandled WRMSR(0x1d9) = 0xc0000def5
23:48:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x100000000000000)

23:48:00 executing program 3:
socketpair(0x18, 0x0, 0x3, &(0x7f0000000a80))

[ 1073.555377][T19469] kvm: kvm [19468]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x100006b7e
23:48:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1074.036606][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[ 1074.046067][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
23:48:01 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x200000000000000)

23:48:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x300000000000000)

[ 1074.715833][T19497] kvm: kvm [19496]: vcpu0, guest rIP: 0xa002 Unhandled WRMSR(0x187) = 0x1d000044b3
23:48:01 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89ff, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}})

[ 1074.776951][T19504] kvm: kvm [19500]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x3000000f1
23:48:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1075.018495][T19510] kvm: kvm [19509]: vcpu0, guest rIP: 0xa002 Unhandled WRMSR(0x187) = 0x1d000044b3
[ 1075.127717][T19510] kvm_intel: kvm [19509]: vcpu0, guest rIP: 0x9502 Unhandled WRMSR(0x1d9) = 0xc0000def5
23:48:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x400000000000000)

[ 1075.205998][T19510] kvm: kvm [19509]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x100006b7e
23:48:02 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e)
sendfile(r5, r4, 0x0, 0x10000a006)

23:48:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x500000000000000)

23:48:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}})

23:48:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x600000000000000)

23:48:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1076.406347][T19543] kvm: kvm [19539]: vcpu0, guest rIP: 0xa002 Unhandled WRMSR(0x187) = 0x1d000044b3
[ 1076.517573][T19543] kvm_intel: kvm [19539]: vcpu0, guest rIP: 0x9502 Unhandled WRMSR(0x1d9) = 0xc0000def5
[ 1076.592155][T19543] kvm: kvm [19539]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x100006b7e
23:48:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:03 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}}}})

23:48:03 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev}})

23:48:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x700000000000000)

23:48:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:04 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
select(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000100)={0x6}, 0x0, 0x0)

23:48:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1077.308182][T19559] kvm: kvm [19558]: vcpu0, guest rIP: 0xa002 Unhandled WRMSR(0x187) = 0x1d000044b3
23:48:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x800000000000000)

23:48:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:04 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2}}}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'erspan0\x00', r2, 0x8000, 0x8, 0xffffffff, 0xffff, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x67, 0x0, 0x1, 0x2f5f873096436d86, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0xc, 0x41, 0x1, 0x0, [{@local, 0x4}]}, @noop]}}}}})

23:48:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x900000000000000)

23:48:05 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}})

23:48:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf00000000000000)

23:48:05 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x40086602, &(0x7f0000000000)={'sit0\x00', 0x0})

[ 1078.622841][T19591] kvm: kvm [19590]: vcpu0, guest rIP: 0x9402 Unhandled WRMSR(0xc2) = 0x800008dde
23:48:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:06 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}})

23:48:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2104000000000000)

23:48:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x2800000000000000)

23:48:06 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8901, 0x0)

[ 1079.949759][T19627] kvm: kvm [19624]: vcpu0, guest rIP: 0x9402 Unhandled WRMSR(0xc2) = 0x800008dde
23:48:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:07 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:48:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x3c00000000000000)

[ 1080.428521][T19642] kvm: kvm [19639]: vcpu0, guest rIP: 0x9402 Unhandled WRMSR(0xc2) = 0x800008dde
23:48:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1080.527576][T19642] kvm: kvm [19639]: vcpu0, guest rIP: 0x9582 Unhandled WRMSR(0x11e) = 0x80000f0a0
23:48:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:07 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x1403, 0x181dc8fe0be4b1cb}, 0x10}}, 0x0)

23:48:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x6000000000000000)

23:48:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:08 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0x0, 0x6, "0dedb3", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "27905a", 0x0, "261882"}}}}}}}}, 0x0)

23:48:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xf0ffffff00000000)

23:48:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:08 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:09 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}})

23:48:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xff00000000000000)

23:48:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:09 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x401c5820, &(0x7f0000000000)={'sit0\x00', 0x0})

[ 1082.870553][T19683] kvm_intel: kvm [19680]: vcpu0, guest rIP: 0x9782 Unhandled WRMSR(0x1d9) = 0xc00005d81
23:48:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xffffff7f00000000)

23:48:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:10 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:48:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xffffffff00000000)

23:48:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0xffffffffff600000)

23:48:11 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

23:48:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:11 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8924, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

23:48:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/132, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x400000000000091, 0x40, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r8)
syz_usb_disconnect(r8)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRES32=r2, @ANYRES8=r1], 0x28}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3ff, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

23:48:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:12 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}})

23:48:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1085.601257][ T4429] usb 2-1: new high-speed USB device number 4 using dummy_hcd
23:48:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:12 executing program 3:
pipe(&(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000000)={'syztnl0\x00', 0x0})

[ 1085.851274][ T4429] usb 2-1: Using ep0 maxpacket: 32
[ 1085.972222][ T4429] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1085.981085][ T4429] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 1085.989429][ T4429] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1085.999008][ T4429] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1086.009263][ T4429] usb 2-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
23:48:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1086.022709][ T4429] usb 2-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1086.037085][ T4429] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1086.044190][ T4429] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1086.053779][ T4429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.329609][ T4429] usb 2-1: config 0 descriptor??
23:48:13 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f0000000000)={'sit0\x00', 0x0})

[ 1086.608125][ T4429] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1086.751346][ T4429] usb 2-1: USB disconnect, device number 4
[ 1086.865452][ T4429] usblp0: removed
23:48:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:14 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8914, 0x0)

23:48:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/132, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x400000000000091, 0x40, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r8)
syz_usb_disconnect(r8)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRES32=r2, @ANYRES8=r1], 0x28}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3ff, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
accept4(r4, 0x0, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/132, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x400000000000091, 0x40, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
accept4(r6, 0x0, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0) (async)
syz_usb_disconnect(r8) (async)
syz_usb_disconnect(r8) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRES32=r2, @ANYRES8=r1], 0x28}}, 0x40000) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async)
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3ff, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)

23:48:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x90, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}]}, 0x90}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:14 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})

23:48:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:15 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', 0x0})

[ 1088.592119][   T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1088.851147][   T32] usb 2-1: Using ep0 maxpacket: 32
[ 1088.993145][   T32] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1089.001872][   T32] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 1089.010211][   T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1089.019618][   T32] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1089.029774][   T32] usb 2-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
23:48:16 executing program 3:
mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)

23:48:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1089.040001][   T32] usb 2-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1089.053578][   T32] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1089.060455][   T32] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1089.070180][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:48:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:16 executing program 3:
io_setup(0x0, &(0x7f00000001c0)=<r0=>0x0)
io_getevents(r0, 0x0, 0x1, &(0x7f0000000200)=[{}], 0x0)

[ 1089.737572][   T32] usb 2-1: config 0 descriptor??
23:48:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1090.027260][   T32] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1090.079704][   T32] usb 2-1: USB disconnect, device number 5
23:48:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1090.204427][   T32] usblp0: removed
23:48:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/132, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x400000000000091, 0x40, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400f91607010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r8)
syz_usb_disconnect(r8) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYRESDEC=r6, @ANYRES32=r2, @ANYRES8=r1], 0x28}}, 0x40000) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3ff, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

23:48:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:17 executing program 3:
r0 = getuid()
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', r0, 0xffffffffffffffff, 0x1000)

23:48:18 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)

[ 1091.562093][ T1034] usb 2-1: new high-speed USB device number 6 using dummy_hcd
23:48:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xb8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x28, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}]}]}, 0xb8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1091.801192][ T1034] usb 2-1: Using ep0 maxpacket: 32
23:48:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1091.923370][ T1034] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[ 1091.932365][ T1034] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 1091.941392][ T1034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1091.950535][ T1034] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1091.963885][ T1034] usb 2-1: config 0 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 0
[ 1091.974586][ T1034] usb 2-1: config 0 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[ 1091.988167][ T1034] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1091.995289][ T1034] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1092.004753][ T1034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
23:48:19 executing program 3:
r0 = epoll_create1(0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)

23:48:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1092.088095][ T1034] usb 2-1: config 0 descriptor??
[ 1092.377843][ T1034] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 249 proto 3 vid 0x03F0 pid 0x6C17
[ 1092.487238][ T1034] usb 2-1: USB disconnect, device number 6
[ 1092.553572][ T1034] usblp0: removed
23:48:20 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)

[ 1092.934097][T19890] kvm_intel: kvm [19888]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x1d9) = 0x300002027
23:48:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
sendfile(r0, r1, 0x0, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7)

23:48:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:20 executing program 3:
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

23:48:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:21 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:21 executing program 3:
r0 = msgget(0x1, 0x0)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/200)

[ 1094.627752][T19929] kvm_intel: kvm [19925]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100004452
23:48:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:21 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
sendfile(r0, r1, 0x0, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
sendfile(r0, r1, 0x0, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
accept4(r6, 0x0, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) (async)

23:48:22 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @remote}, &(0x7f0000000040)=0xc)

23:48:22 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:22 executing program 3:
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbc21d1c66db6231c)

23:48:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:22 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:22 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
sendfile(r0, r1, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) (async)
recvmmsg(r7, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7)

23:48:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:23 executing program 3:
symlinkat(&(0x7f0000001000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001040)='\x00')

[ 1095.982479][T19978] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
23:48:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pim6reg0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x55)

23:48:23 executing program 3:
memfd_create(&(0x7f0000000280)='%)}%^\x00', 0x2)

23:48:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pim6reg0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x55)

23:48:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1096.880071][T19988] kvm: kvm [19986]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc2) = 0x100004418
23:48:24 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40b80, 0x0)

[ 1097.296662][T20004] kvm_intel: kvm [20001]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x1d9) = 0x100004452
23:48:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pim6reg0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x55)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'pim6reg0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x55) (async)

23:48:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:24 executing program 3:
msgget(0x1, 0x284)

23:48:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:25 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1c040, 0x0)

23:48:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1098.426036][T20025] kvm: kvm [20018]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc2) = 0x100004418
23:48:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:25 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:25 executing program 3:
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)

23:48:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1098.930437][T20042] kvm: kvm [20040]: vcpu0, guest rIP: 0x9302 Unhandled WRMSR(0x187) = 0x3000044f2
23:48:26 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x0)

23:48:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:26 executing program 3:
open$dir(&(0x7f0000000000)='./file0\x00', 0x2440, 0x0)
llistxattr(&(0x7f0000000500)='./file0\x00', 0x0, 0x0)

23:48:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x75}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000010)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:26 executing program 3:
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0)

23:48:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xffffffffffffff3a, r3, 0x721, 0x0, 0x0, {{}, {@val={0x0, 0x3, r1}, @val={0x0, 0x99, {0xff, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x4, 0x2, 0x1}]}]}, 0x28}}, 0x0)

23:48:27 executing program 3:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x103)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0, 0x0)

23:48:27 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xffffffffffffff3a, r3, 0x721, 0x0, 0x0, {{}, {@val={0x0, 0x3, r1}, @val={0x0, 0x99, {0xff, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x4, 0x2, 0x1}]}]}, 0x28}}, 0x0)

23:48:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:27 executing program 3:
msgget$private(0x0, 0x331)

23:48:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0xffffffffffffff3a, r3, 0x721, 0x0, 0x0, {{}, {@val={0x0, 0x3, r1}, @val={0x0, 0x99, {0xff, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x4, 0x2, 0x1}]}]}, 0x28}}, 0x0)

23:48:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:28 executing program 3:
rt_sigaction(0x18, 0x0, 0x0, 0x8, &(0x7f0000000180))

23:48:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x1, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x25)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket(0x1, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x25)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:28 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

23:48:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket(0x1, 0x1, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x25)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:29 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e)

23:48:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="37fa000b", @ANYRES32=r1, @ANYBLOB="010000000000000000004400000008000300b33f386b5d905136bf16e17b3c29f1c330d926d3eda7fd8bf1b33db489c9000b3663a87035e82e7b3e3cc686c768b2eb50f5cccb6a9273ae2f2901a2f2e7242e1f0beff7d2c55a946d18d47b4f45d298529638056c68619d1c1485853813cb72dd4f0991dd02e662f2896ddb01c25f1509ae01c7d89cb6a5ff0d80a509cd7d", @ANYRESOCT=r4, @ANYBLOB="0c0023800600020000000000"], 0x28}}, 0x4004)

23:48:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:30 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0, &(0x7f0000000080))

23:48:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1103.291018][ T1034] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1103.433591][T20166] kvm: kvm [20164]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x1000044b8
[ 1103.481042][ T1034] usb 2-1: device descriptor read/64, error 18
[ 1103.505863][T20166] kvm: kvm [20164]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x187) = 0x20000447d
23:48:30 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40e03, 0x0)

[ 1103.554979][T20166] kvm_intel: kvm [20164]: vcpu0, guest rIP: 0x9602 Unhandled WRMSR(0x1d9) = 0xa000056e1
[ 1103.752113][ T1034] usb 2-1: new high-speed USB device number 8 using dummy_hcd
23:48:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1103.942845][ T1034] usb 2-1: device descriptor read/64, error 18
23:48:31 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xac, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xac}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1104.062389][ T1034] usb usb2-port1: attempt power cycle
23:48:31 executing program 3:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee00, 0x1000)

23:48:31 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0)

[ 1104.481593][ T1034] usb 2-1: new high-speed USB device number 9 using dummy_hcd
23:48:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1104.651719][ T1034] usb 2-1: device descriptor read/8, error -61
[ 1104.812401][T20198] kvm: kvm [20197]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x1000044b8
[ 1104.886220][T20198] kvm: kvm [20197]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0x187) = 0x20000447d
[ 1104.942073][ T1034] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1105.012897][T20198] kvm_intel: kvm [20197]: vcpu0, guest rIP: 0x9602 Unhandled WRMSR(0x1d9) = 0xa000056e1
[ 1105.112490][ T1034] usb 2-1: device descriptor read/8, error -61
[ 1105.232152][ T1034] usb usb2-port1: unable to enumerate USB device
23:48:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="37fa000b", @ANYRES32=r1, @ANYBLOB="010000000000000000004400000008000300b33f386b5d905136bf16e17b3c29f1c330d926d3eda7fd8bf1b33db489c9000b3663a87035e82e7b3e3cc686c768b2eb50f5cccb6a9273ae2f2901a2f2e7242e1f0beff7d2c55a946d18d47b4f45d298529638056c68619d1c1485853813cb72dd4f0991dd02e662f2896ddb01c25f1509ae01c7d89cb6a5ff0d80a509cd7d", @ANYRESOCT=r4, @ANYBLOB="0c0023800600020000000000"], 0x28}}, 0x4004)

23:48:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:33 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000a80)={@local}, 0x14)

23:48:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:33 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:33 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:33 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0)

[ 1106.633482][T20228] kvm: kvm [20219]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x100004469
[ 1106.643771][ T5066] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1106.733612][T20228] kvm: kvm [20219]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x2000044bd
23:48:34 executing program 3:
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x81000)

[ 1106.851175][ T5066] usb 2-1: device descriptor read/64, error 18
[ 1106.867509][T20228] kvm: kvm [20219]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x11e) = 0x1000044d9
23:48:34 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1107.131174][ T5066] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1107.321782][ T5066] usb 2-1: device descriptor read/64, error 18
23:48:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1107.441599][ T5066] usb usb2-port1: attempt power cycle
23:48:34 executing program 3:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x103)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

23:48:34 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1107.891826][ T5066] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1108.082045][ T5066] usb 2-1: device descriptor read/8, error -61
[ 1108.333296][T20259] kvm: kvm [20257]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x100004469
[ 1108.351378][ T5066] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1108.528024][T20259] kvm: kvm [20257]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x2000044bd
[ 1108.542069][ T5066] usb 2-1: device descriptor read/8, error -61
[ 1108.672215][ T5066] usb usb2-port1: unable to enumerate USB device
23:48:36 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="37fa000b", @ANYRES32=r1, @ANYBLOB="010000000000000000004400000008000300b33f386b5d905136bf16e17b3c29f1c330d926d3eda7fd8bf1b33db489c9000b3663a87035e82e7b3e3cc686c768b2eb50f5cccb6a9273ae2f2901a2f2e7242e1f0beff7d2c55a946d18d47b4f45d298529638056c68619d1c1485853813cb72dd4f0991dd02e662f2896ddb01c25f1509ae01c7d89cb6a5ff0d80a509cd7d", @ANYRESOCT=r4, @ANYBLOB="0c0023800600020000000000"], 0x28}}, 0x4004)

23:48:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:36 executing program 3:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0)

23:48:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:36 executing program 3:
readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/200, 0xc8)

[ 1110.076194][T20271] kvm: kvm [20270]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x100004469
[ 1110.111732][ T5066] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1110.216426][T20271] kvm: kvm [20270]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x2000044bd
23:48:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1110.310979][ T5066] usb 2-1: device descriptor read/64, error 18
23:48:37 executing program 3:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000002100)={{0x1, 0xee01, 0x0, 0xee00, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

[ 1110.591223][ T5066] usb 2-1: new high-speed USB device number 16 using dummy_hcd
23:48:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1110.796107][ T5066] usb 2-1: device descriptor read/64, error 18
23:48:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1110.922343][ T5066] usb usb2-port1: attempt power cycle
[ 1111.341439][ T5066] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1111.501656][T20306] kvm: kvm [20304]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x100004469
[ 1111.512084][ T5066] usb 2-1: device descriptor read/8, error -61
[ 1111.602237][T20306] kvm: kvm [20304]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x2000044bd
[ 1111.713937][T20306] kvm: kvm [20304]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x11e) = 0x1000044d9
[ 1111.801642][ T5066] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1111.971909][ T5066] usb 2-1: device descriptor read/8, error -61
[ 1112.112061][ T5066] usb usb2-port1: unable to enumerate USB device
23:48:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf0, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8421b8eaaa2fd62cfcf20e2ed4e372202270f3d4084b50f7"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "799c5560b229a12ab2dc5fab568e653a998fe47dfff34f9a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x200448c5}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000304", @ANYRES32=r1, @ANYBLOB="0c00238006000200000000006aaf6b5082b7574b878068270c9c5992572dd844d9fa509c442d63e7bcb204f7e9fda63568843c319a0d5af5a8c44862e827de583d39bf093768611904b454a9ae7c9a1d6bae3a"], 0x28}}, 0x0)

23:48:39 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:48:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:39 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:39 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:40 executing program 3:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0)

[ 1113.403145][T20332] kvm: kvm [20326]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0xc1) = 0x100004469
23:48:40 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf0, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8421b8eaaa2fd62cfcf20e2ed4e372202270f3d4084b50f7"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "799c5560b229a12ab2dc5fab568e653a998fe47dfff34f9a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x200448c5}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000304", @ANYRES32=r1, @ANYBLOB="0c00238006000200000000006aaf6b5082b7574b878068270c9c5992572dd844d9fa509c442d63e7bcb204f7e9fda63568843c319a0d5af5a8c44862e827de583d39bf093768611904b454a9ae7c9a1d6bae3a"], 0x28}}, 0x0)

[ 1113.494391][T20332] kvm: kvm [20326]: vcpu0, guest rIP: 0x9282 Unhandled WRMSR(0xc2) = 0x2000044bd
[ 1113.579727][T20332] kvm: kvm [20326]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x11e) = 0x1000044d9
23:48:40 executing program 3:
msgget(0x1, 0x231)

23:48:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xf0, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8421b8eaaa2fd62cfcf20e2ed4e372202270f3d4084b50f7"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "799c5560b229a12ab2dc5fab568e653a998fe47dfff34f9a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x200448c5}, 0x40) (async, rerun: 32)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000304", @ANYRES32=r1, @ANYBLOB="0c00238006000200000000006aaf6b5082b7574b878068270c9c5992572dd844d9fa509c442d63e7bcb204f7e9fda63568843c319a0d5af5a8c44862e827de583d39bf093768611904b454a9ae7c9a1d6bae3a"], 0x28}}, 0x0) (rerun: 32)

23:48:41 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:41 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)

23:48:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:41 executing program 3:
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))

23:48:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:42 executing program 3:
r0 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_RMID(r0, 0x0)

23:48:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:42 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:42 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = signalfd4(r0, &(0x7f0000000040)={[0xd0]}, 0x8, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:42 executing program 3:
mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100)

[ 1116.099543][T20410] kvm: kvm [20408]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x3000000f1
23:48:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:43 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = signalfd4(r0, &(0x7f0000000040)={[0xd0]}, 0x8, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:43 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

23:48:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:44 executing program 1:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = signalfd4(r0, &(0x7f0000000040)={[0xd0]}, 0x8, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
signalfd4(r0, &(0x7f0000000040)={[0xd0]}, 0x8, 0x80000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)

23:48:44 executing program 3:
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x35)

23:48:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:44 executing program 3:
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
llistxattr(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0)

[ 1117.474512][T20444] kvm: kvm [20443]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x3000000f1
23:48:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c005)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff0a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6e75}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x578}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008091)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x28}}, 0x8000)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1d8, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x64}}}}, [@NL80211_ATTR_IE={0x1b7, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x7, @device_b, 0xfffff801, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x2f, 0x81}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @random_vendor={0xdd, 0x19, "5f1b778daf96fc2afa0efb856ae4ec649d1c2eaa869c4c210f"}, @mic={0x8c, 0x18, {0x3e1, "12bf1b84a654", @long="b66d78d9965b5a389b7e847f790f0015"}}, @dsss={0x3, 0x1, 0x2c}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x77, @device_b, 0x7, @device_a, 0x3, 0x4, @device_b, 0x408d}}, @random_vendor={0xdd, 0x44, "f515205084d9faae1ce11f33faac919f6d231f46c2090821717034291bf7d9d7a392840656c96c615fa107b417ab17b7d3cedb6e253d7ea1a09ce3c520033ba8d9caa8d3"}, @dsss={0x3, 0x1, 0xb5}, @tim={0x5, 0xd6, {0x40, 0x2b, 0x7b, "f38cfd59531f023df703d907322d40d3de154fb246bbdc990e039e9436c219fce913ee1d35145629d6bc19b6a5276dbd01ed7345341fb743f427dfd6301d3db290efb57c29b650c1af0759b95113d01e86f382992d9dd537a81ed5adde740ef357e7be72c5891057af2a00d509d2b15f724612411614a9e3af9733fc87e4f0f7e07d8308b26004d7df583d41e7e6da005e1cd9d43e67f8e1419cfd5cb716d48577b39fc54bf9966947785bea9f576964a8d787e905fa76dec2fd67dc4233b7d8bafe7b7867124f9038effe67ca27a6ac6c43f9"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4060}, 0x48000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000040)

23:48:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:44 executing program 3:
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0)

23:48:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x30, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c005)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff0a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6e75}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x578}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008091)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x28}}, 0x8000)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1d8, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x64}}}}, [@NL80211_ATTR_IE={0x1b7, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x7, @device_b, 0xfffff801, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x2f, 0x81}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @random_vendor={0xdd, 0x19, "5f1b778daf96fc2afa0efb856ae4ec649d1c2eaa869c4c210f"}, @mic={0x8c, 0x18, {0x3e1, "12bf1b84a654", @long="b66d78d9965b5a389b7e847f790f0015"}}, @dsss={0x3, 0x1, 0x2c}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x77, @device_b, 0x7, @device_a, 0x3, 0x4, @device_b, 0x408d}}, @random_vendor={0xdd, 0x44, "f515205084d9faae1ce11f33faac919f6d231f46c2090821717034291bf7d9d7a392840656c96c615fa107b417ab17b7d3cedb6e253d7ea1a09ce3c520033ba8d9caa8d3"}, @dsss={0x3, 0x1, 0xb5}, @tim={0x5, 0xd6, {0x40, 0x2b, 0x7b, "f38cfd59531f023df703d907322d40d3de154fb246bbdc990e039e9436c219fce913ee1d35145629d6bc19b6a5276dbd01ed7345341fb743f427dfd6301d3db290efb57c29b650c1af0759b95113d01e86f382992d9dd537a81ed5adde740ef357e7be72c5891057af2a00d509d2b15f724612411614a9e3af9733fc87e4f0f7e07d8308b26004d7df583d41e7e6da005e1cd9d43e67f8e1419cfd5cb716d48577b39fc54bf9966947785bea9f576964a8d787e905fa76dec2fd67dc4233b7d8bafe7b7867124f9038effe67ca27a6ac6c43f9"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4060}, 0x48000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000040)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c005) (async)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff0a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6e75}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x578}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008091) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x28}}, 0x8000) (async)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1d8, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x64}}}}, [@NL80211_ATTR_IE={0x1b7, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x7, @device_b, 0xfffff801, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x2f, 0x81}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @random_vendor={0xdd, 0x19, "5f1b778daf96fc2afa0efb856ae4ec649d1c2eaa869c4c210f"}, @mic={0x8c, 0x18, {0x3e1, "12bf1b84a654", @long="b66d78d9965b5a389b7e847f790f0015"}}, @dsss={0x3, 0x1, 0x2c}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x77, @device_b, 0x7, @device_a, 0x3, 0x4, @device_b, 0x408d}}, @random_vendor={0xdd, 0x44, "f515205084d9faae1ce11f33faac919f6d231f46c2090821717034291bf7d9d7a392840656c96c615fa107b417ab17b7d3cedb6e253d7ea1a09ce3c520033ba8d9caa8d3"}, @dsss={0x3, 0x1, 0xb5}, @tim={0x5, 0xd6, {0x40, 0x2b, 0x7b, "f38cfd59531f023df703d907322d40d3de154fb246bbdc990e039e9436c219fce913ee1d35145629d6bc19b6a5276dbd01ed7345341fb743f427dfd6301d3db290efb57c29b650c1af0759b95113d01e86f382992d9dd537a81ed5adde740ef357e7be72c5891057af2a00d509d2b15f724612411614a9e3af9733fc87e4f0f7e07d8308b26004d7df583d41e7e6da005e1cd9d43e67f8e1419cfd5cb716d48577b39fc54bf9966947785bea9f576964a8d787e905fa76dec2fd67dc4233b7d8bafe7b7867124f9038effe67ca27a6ac6c43f9"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4060}, 0x48000) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000040) (async)

23:48:45 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:45 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, &(0x7f0000000280))

23:48:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:45 executing program 3:
socket(0x2, 0x1, 0x5)

23:48:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c005) (async)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x11c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x72}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff0a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6e75}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x578}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x29e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5a9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008091) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x28}}, 0x8000)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1d8, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x64}}}}, [@NL80211_ATTR_IE={0x1b7, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4}, 0x1, 0x7, @device_b, 0xfffff801, 0x8, 0x2}}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x2f, 0x81}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @random_vendor={0xdd, 0x19, "5f1b778daf96fc2afa0efb856ae4ec649d1c2eaa869c4c210f"}, @mic={0x8c, 0x18, {0x3e1, "12bf1b84a654", @long="b66d78d9965b5a389b7e847f790f0015"}}, @dsss={0x3, 0x1, 0x2c}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x77, @device_b, 0x7, @device_a, 0x3, 0x4, @device_b, 0x408d}}, @random_vendor={0xdd, 0x44, "f515205084d9faae1ce11f33faac919f6d231f46c2090821717034291bf7d9d7a392840656c96c615fa107b417ab17b7d3cedb6e253d7ea1a09ce3c520033ba8d9caa8d3"}, @dsss={0x3, 0x1, 0xb5}, @tim={0x5, 0xd6, {0x40, 0x2b, 0x7b, "f38cfd59531f023df703d907322d40d3de154fb246bbdc990e039e9436c219fce913ee1d35145629d6bc19b6a5276dbd01ed7345341fb743f427dfd6301d3db290efb57c29b650c1af0759b95113d01e86f382992d9dd537a81ed5adde740ef357e7be72c5891057af2a00d509d2b15f724612411614a9e3af9733fc87e4f0f7e07d8308b26004d7df583d41e7e6da005e1cd9d43e67f8e1419cfd5cb716d48577b39fc54bf9966947785bea9f576964a8d787e905fa76dec2fd67dc4233b7d8bafe7b7867124f9038effe67ca27a6ac6c43f9"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4060}, 0x48000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000040)

[ 1118.817898][T20479] kvm: kvm [20478]: vcpu0, guest rIP: 0x9202 Unhandled WRMSR(0x186) = 0x3000000f1
23:48:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x8040)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="674e6def6ea20cedf6c29dddbf2f17ce115ff33f718587d79164fd1b81943d013d37d48546"], 0x28}}, 0x0)

23:48:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:47 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440), 0x4)

[ 1120.162550][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x8040) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="674e6def6ea20cedf6c29dddbf2f17ce115ff33f718587d79164fd1b81943d013d37d48546"], 0x28}}, 0x0)

23:48:47 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0)

23:48:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:48 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000048c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RLOCK(r1, 0x0, 0x0)

23:48:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x8040) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="674e6def6ea20cedf6c29dddbf2f17ce115ff33f718587d79164fd1b81943d013d37d48546"], 0x28}}, 0x0)

23:48:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1121.917345][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:49 executing program 3:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$FUSE_STATFS(r0, 0x0, 0x0)

23:48:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
fcntl$notify(r4, 0x402, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0))
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:49 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
getpeername$unix(r1, 0x0, 0x0)

23:48:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
fcntl$notify(r4, 0x402, 0x10) (async)
fcntl$notify(r4, 0x402, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0))
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:48:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:50 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
write$P9_RMKNOD(r1, 0x0, 0x0)

23:48:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
fcntl$notify(r4, 0x402, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0))
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
fcntl$notify(r4, 0x402, 0x10) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0)) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)

23:48:50 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

23:48:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="0cef22800600020000000000"], 0x28}}, 0x0)

23:48:51 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:51 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000), &(0x7f0000000300)='GPL\x00', 0x0, 0x16, &(0x7f0000000340)=""/22, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x50)

23:48:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1124.282752][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:51 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3f, 0x83, &(0x7f0000000300)=""/131, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

23:48:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="0cef22800600020000000000"], 0x28}}, 0x0)

23:48:51 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 1124.803720][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:48:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r1, @ANYBLOB="0cef22800600020000000000"], 0x28}}, 0x0)

23:48:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:52 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

23:48:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1125.434727][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1}]}]}, 0x34}}, 0x0)

23:48:52 executing program 3:
bpf$ITER_CREATE(0x3, &(0x7f0000000580), 0x8)

23:48:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:48:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1}]}]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1}]}]}, 0x34}}, 0x0) (async)

23:48:53 executing program 3:
syz_clone(0x83207100, 0x0, 0x0, 0x0, 0x0, 0x0)

23:48:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1}]}]}, 0x34}}, 0x0)

23:48:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:54 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x100)

23:48:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200))
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xd0, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xd0}}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

23:48:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
pipe2$watch_queue(&(0x7f00000016c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000190000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004024)
r10 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r10, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001a00)={0x1ddc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d8c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x10dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "35c1ce8fc75886aa16b6569dc4e338b73b8313bed76cc9ffee95a5105c09387e49b2bb4a9e676bc720344028ddcbdbf28052141a247490d7ea502a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7b, 0x2, "041a2ee4da029cd892387ada58d0064535839e1739f44a1d1513c6d875b4fe980dd68afaac96df23d24970e245392f68bb222829bec1016e5751c849270ec5f55d4df65f456be45452a2c805eb4942682b5c19bfd59e72e7d7f7e1a3332b03d681bc82885321ef1ba379f87752f0bcbe0c454e1468010b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c4, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xfb, 0xab, 0x3f}}, @perr={0x84, 0x2, {0x6}}, @measure_req={0x26, 0xd4, {0x9, 0xfb, 0x0, "aafe1d7c202ef4e3138f099c818ac2442b0330324cc902cb99728237e7335228ba0f9dfc83e5aa14a815afbb6c251a208c3e7da585517ccfbf47cba491735dd17fd4df0305b40ebcb2d673b2a37cef5e0dfca73309c23ee36f31d6d18136982017d29a1a3cade812229bfdde22a2e47a3f570bfd1b71e94a7f84ee31bf69b9a4a22df33ae0f4a066b097b356c0fc3ad33437c238b179dee2b272bb4fd80d6aa925c10592b18d883ca46a852057b6226b872ea3d16b1c2254cbcb093e92c878d9dcbf6de2bb35af34e3393f807574a9fdd9"}}, @ibss={0x6, 0x2, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb2, 0x80}}, @perr={0x84, 0xd4, {0xa8, 0xc, [@not_ext={{}, @broadcast, 0x401, "", 0x8}, @ext={{}, @broadcast, 0x4, @device_a, 0x32}, @not_ext={{}, @device_a, 0x2, "", 0x24}, @ext={{}, @device_b, 0xe7, @device_b, 0x12}, @ext={{}, @device_a, 0x0, @broadcast, 0x1}, @ext={{}, @device_a, 0x6, @device_b, 0xa}, @ext={{}, @broadcast, 0x400, @device_a, 0xe}, @ext={{}, @broadcast, 0x6, @broadcast, 0x28}, @ext={{}, @device_a, 0x401, @device_b, 0xe}, @ext={{}, @device_a, 0x7fff, @device_b, 0x3a}, @not_ext={{}, @device_b, 0x6, "", 0x42}, @ext={{}, @device_a, 0x3, @device_a, 0x2c}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xdc, 0x80, [@measure_req={0x26, 0xd6, {0x80, 0x7, 0x7, "89564c068e7f201729726fe83197d1279817a2d66fd68c76104dea69d65ddac530572f65cb33c105609b271080d50d2052da0f91cefb57da901004130c8eb4aaf18d1e33a8757bafaafd5ffb1209608c0c9997fb71cd150b32c12ccd2c08aadeecdbcffa8cf0e44eac757b0a860bb1df3c5758b4c06be119c05fdf08fd88a45cc7460c827daa87540adb87cf74aa9426da26e92ecdc903d3881de6c5cd6e51094597e735190d13ece9bad7e29174f09653b966dcce88d447749952c260aff5432c25043b45c524b2683830860321c079d5d015"}}]}, @NL80211_ATTR_PROBE_RESP={0x7e7, 0x91, "2e55251eb63cec8d6577ee2936ce51bf71335ffd406b281aff505257e89f14db5e2e4b0779188ebe3d60d8ccaf6d1b723e7090454130c7c43640a7f530b7ca80336b2304cb09ead0c81bb45188fe315f26f7d380829bcbc309bdee07d72c8b81f3dd33ec5c3bc423462bb322c722e3cea3cc8be56b7418d44954e3dd59b5ee2a73d4a410e2b62d74b11cbf9eb6532fa6393cb192f39629fd5360f38c64363355caf4fee788ed7ce54f5c2af7c8c61afdeab13b1f26108be04b0805b40395f747e04be1ec4e2bb25c740439f98d7d1f2b4367277ba53304bf090c33450fc182a90897089e39b9e1d5556007856cb790a4d0a3d7f30c3a4905d5036f2fdf70525415096f2bde6a42d5aafb606500207dbb4d587b2b331ad657a4a7f2688fb8befffebc69e6b3fd4e1f3e747d841cc785b021ec9750b7f997788733c44368430b2e198eb2343a0d4082d7fc2de803bf41a4b5f314624925659f810fe252cc76ee2e2503206c0d815f6e2d4d83f11dd46716e88117f56e1d5eb212c85b9c4f08a1eba5436b8eb9f5cb64dad8d303f482285d13a46b76377bcdcf4a20f24c14c7a01a0f10998b5723ed59631f94b492c4d25a664bc90b07dbc88b771d5881d258d71e11f740f0c9189ea913f47d8064ad935742f25442795bc54a58e6d14e04bf3e4cf96f6fd15a910fd3ba96fc1793bb36fdb38fa3ba7e7511398915cce99e2d176fadcd2b7b4fd480558752aef683e94bd92489b40352b9902c0478c46339883d64801ac6cd3578b1bd8dbeb50654797395e18f315a7d06b7b5fb0cfd51cb9160d873819b8d93e31e9cb3cdf9e8f5d17b3cb51caf73ae10de55f1f97ecd00840270f9da12ca9f35b3ca176f3918201e355f62850060d7359b5fbe80a46c9131afc5443388900dfddc9b12eb940b0a6a7be05c3589acbf81b902a581cd03babf025bc936a9377f224b96eafe717a4b4626c612e2901c2723e6f61751266ce01d46c53799372647cbfe0fb62b401fa4b6277beb9cddac64e2ece7fdf6d1d63552d8062ce60237f8a7cf7666188588a134657888aa016268838e6234ad23614dc61101f1b1762ca7fa5b6096b30d94b0b92a0221e8ec528cdab4cc5e8d07b18c7b312c240676032f041605303d7151e158b480cba7956c013938bbcac103c4c7d6227c2dea2e6a145edb0c1503926a095b36307b4b74a8c7dde9f49f23fcd8584726904525488eddf0e58850515f7fed7e404fc8750645e5768d587209d8c9d1df1e331ccc6bb45d2555dad33b04c13316e2d0b2dc833f8aa47563cfd62ffd4e1598946e0e6ac3baff0391fed36ad1c3fc63b74fdd99f25ce4c1cda5cc503ef039744cca324f9e9d869214439a43444048342e464f8fa644a67e11d712c88f2845a1ccbf562b96a13046c6bfd1f9c5595eb0ebab985c3ab2c6761a9658659a4f424e75892235598655ddf181c862b5251f20774cbbbd7d076f86d27eee35e0ec88d83bf961d8b66a2a84c7c0db0d6b5f1fd3741f7948f05ef44f6eec028b751120a4aeef3a79effd100df251c6d8967ffed4d50bd1a4ade025976421e1ec309720cbe3fda7c7c47c483271464e1a80c2a3214a1af9289a476e1ce90014b598082ae2c06a8f433cbd97331b16270f2c42447400c34d26e8ba14da50e7d18dd05294ee56514d6a1623a8412930c9bf24ceca514eb11e8118d39854f48a7da06b56c66c5d9261a738280fafd83ddee4715d2698d7d1cb9226d439e55195e807d476ef0e7961cfe09ca3204190fc6c1ed2f9a425fd024803ea185a32ec488dd4b4855bb9792255cfdc5cfe5c611808d3b0e176086058193e5d7c6d4cf443a83543d26ce5581184e10449067f3dfdbe0ed9961303c3d8d60e3d98561281be91b243be3725ff5b22b041972e6bb587718b2daa77982d58f09de1738b73419f7427265d90ffc68681fe4ca73b862d182f769deac223eccceaf9539f301491fe4effa6fbf4d0465091fc589f5d744c27726696f1bdabae6800fc4476f652fedc1aecd70364c0a2eaf2b83a469620ef53793b972c89c46aa1c6f631f30c9ce04c2ca2176cf55b9773f9ac5f09b921a545eafd8de9961635d399a78daeb56822e215a7b6507b5ab4a33c7ff04b2913b98d9aa93bea58c0c055e50f6a41198311672c696de89239930c6c0cbdea1beb31c0b25e98b0e9130857bb482bc01ecb022d6946c4e956c2d292a7b8dce30f82908f86ec758b069a2ca8a02a25aac718574fc54e371e38e0c21a036daf6ddf1dd152b8570ba16f23d197b75c62070d48010eec0cda6ff8ed21508e492337517df50a022a4d467d084b8143fe06bc2d0e041c4d0f6325c2fe1c4ea5a1647e23f8d46c0bb95fc5ce68efbf99815b4deecc604fb3e778b6966b9ae9e1f0f95583e8a4c4b4b16bd5d839cb738f9f9860defb42d140a9d2b8f76dc211688b727a267de32e66ad64bb8e3f76909c94f3cd25a321bafb8205b8cc5680c516d56524e2d07e4af141eafac57b1d02c9243904257afa8a1a6afccfd9af110ec0fc32138242b4db265038383ae0eab28d85df563f1076ae601db45f1c46a56afef4703b6ff708e012daa4ea822d939d25cd8d16c9601778975a6265997ffcfc883cce45ec5815c36e9748db4436e20b1eee86099fcc665f276cdc675ae946276693b960636e610ae29ced507759453b8eebc6908346c09d3f45fcba2bd619cf6348480c3b6b0bc32b26a6762886d6f35de23abb90a5b6651f4f7796ebcec31170da188ab8a453d2dae091f04fc3c48b86c26485c8c58819ecda0efcd49ebf4d71db46d3e60c137247dd9494dbe43aad0bbb2aa38eb77b312e0ca8598bd590088df4"}, @NL80211_ATTR_IE={0x9d, 0x2a, [@random={0xf9, 0x8f, "c15a4c5b77e0ac9836c8454ebb68660fba046bd02515ce74c5b29685944450d804f2f03fb0638fe17d3ebd2d94d154e45eed8f9977e45660acee074a7551193f118ca325a392d91d88c92b1f4437d0cf1d1519b62983edb121d245bb2559d5e10cf37ee7c9febf412ddb7fda14d8424f17dcd8a1f5d18c19bdc01cc57a6340016f9254d82b659cca51a68643124aec"}, @mesh_chsw={0x76, 0x6, {0x40, 0x81, 0x39, 0x7f}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x179, 0x7f, [@supported_rates={0x1, 0x1, [{0xc, 0x1}]}, @random={0x40, 0x82, "b44f8add701352d5aafab502bdd08a433a208c052020034c789774e1eb286081aa025692f833df4e6f394e9b622487ea8dd277c17a952989e942221da2c17e7b99470a2efe64a072baafcf431ba56049a19d1d8787dbf6ae536549cb68e70e1d986a8ef35755b864766c17bc9392f58ee2f94c6d0a62f07851bab43c999e51e3b1a6"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x36}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x3800000000000, 0x1386, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x3, 0xcb}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @random={0x5, 0xb0, "95dccc05c7e422aca23e9c3b7efcc35b10cf40f44c621eef834b9484d3dfedae548628212bdd69ec90c1892acaf351c844d66224bd45858c0504a273fac671749b5e0d8a97cef28aeb63d6407895cc35923b589e71bc47d44dd2f5274c55deda2fecb22c46732d0461748f19facf38c4c002373b8521fd12efe5aca3fc27072dbfe257740a4e6077d88a61d22766a2bb1293a5c17f590272f49e5f273f55fe98d3bab3a33563ba0f6c87cd7eb663b95e"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x46}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8e}]}, 0x1ddc}, 0x1, 0x0, 0x0, 0x5}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1064, r13, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "25834efb65d4152e2834a57f34197f894a6ffa06aa8989d7cd642d5253a00972af454033d5c8fbfc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x39}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1064}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300fade296146c3648b8614f06ab49690add38182eb6e9ef621f838197ed09eb9df4e648371734ada23719c951385084e8ed18105bd2b4bd3b5abf3620d18d2a2c2e5d4eda04cf188bc4c81a951f439b2dfbc8283e8eeeef2cd2edb173d942e8da8e5c586ce0e6b3ce4ed4ac200454279a0a54f7c4e6961eedec8f7af94e611718da9f67cf8ba21a7cc82818ef5b87c0cc52918882e3138ab5f1897bc6b31", @ANYRES32=r1, @ANYRESHEX], 0x28}}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000001540)=0xc)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r15 = accept4(r14, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r15, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r15, 0x1, 0x53, &(0x7f0000001640)={0x7, 0x7, 0x2}, &(0x7f0000001680)=0x28)

23:48:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1127.704543][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
23:48:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
pipe2$watch_queue(&(0x7f00000016c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r2) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000190000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004024)
r10 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async, rerun: 32)
recvmmsg(r10, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001a00)={0x1ddc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d8c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x10dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "35c1ce8fc75886aa16b6569dc4e338b73b8313bed76cc9ffee95a5105c09387e49b2bb4a9e676bc720344028ddcbdbf28052141a247490d7ea502a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7b, 0x2, "041a2ee4da029cd892387ada58d0064535839e1739f44a1d1513c6d875b4fe980dd68afaac96df23d24970e245392f68bb222829bec1016e5751c849270ec5f55d4df65f456be45452a2c805eb4942682b5c19bfd59e72e7d7f7e1a3332b03d681bc82885321ef1ba379f87752f0bcbe0c454e1468010b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c4, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xfb, 0xab, 0x3f}}, @perr={0x84, 0x2, {0x6}}, @measure_req={0x26, 0xd4, {0x9, 0xfb, 0x0, "aafe1d7c202ef4e3138f099c818ac2442b0330324cc902cb99728237e7335228ba0f9dfc83e5aa14a815afbb6c251a208c3e7da585517ccfbf47cba491735dd17fd4df0305b40ebcb2d673b2a37cef5e0dfca73309c23ee36f31d6d18136982017d29a1a3cade812229bfdde22a2e47a3f570bfd1b71e94a7f84ee31bf69b9a4a22df33ae0f4a066b097b356c0fc3ad33437c238b179dee2b272bb4fd80d6aa925c10592b18d883ca46a852057b6226b872ea3d16b1c2254cbcb093e92c878d9dcbf6de2bb35af34e3393f807574a9fdd9"}}, @ibss={0x6, 0x2, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb2, 0x80}}, @perr={0x84, 0xd4, {0xa8, 0xc, [@not_ext={{}, @broadcast, 0x401, "", 0x8}, @ext={{}, @broadcast, 0x4, @device_a, 0x32}, @not_ext={{}, @device_a, 0x2, "", 0x24}, @ext={{}, @device_b, 0xe7, @device_b, 0x12}, @ext={{}, @device_a, 0x0, @broadcast, 0x1}, @ext={{}, @device_a, 0x6, @device_b, 0xa}, @ext={{}, @broadcast, 0x400, @device_a, 0xe}, @ext={{}, @broadcast, 0x6, @broadcast, 0x28}, @ext={{}, @device_a, 0x401, @device_b, 0xe}, @ext={{}, @device_a, 0x7fff, @device_b, 0x3a}, @not_ext={{}, @device_b, 0x6, "", 0x42}, @ext={{}, @device_a, 0x3, @device_a, 0x2c}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xdc, 0x80, [@measure_req={0x26, 0xd6, {0x80, 0x7, 0x7, "89564c068e7f201729726fe83197d1279817a2d66fd68c76104dea69d65ddac530572f65cb33c105609b271080d50d2052da0f91cefb57da901004130c8eb4aaf18d1e33a8757bafaafd5ffb1209608c0c9997fb71cd150b32c12ccd2c08aadeecdbcffa8cf0e44eac757b0a860bb1df3c5758b4c06be119c05fdf08fd88a45cc7460c827daa87540adb87cf74aa9426da26e92ecdc903d3881de6c5cd6e51094597e735190d13ece9bad7e29174f09653b966dcce88d447749952c260aff5432c25043b45c524b2683830860321c079d5d015"}}]}, @NL80211_ATTR_PROBE_RESP={0x7e7, 0x91, "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"}, @NL80211_ATTR_IE={0x9d, 0x2a, [@random={0xf9, 0x8f, "c15a4c5b77e0ac9836c8454ebb68660fba046bd02515ce74c5b29685944450d804f2f03fb0638fe17d3ebd2d94d154e45eed8f9977e45660acee074a7551193f118ca325a392d91d88c92b1f4437d0cf1d1519b62983edb121d245bb2559d5e10cf37ee7c9febf412ddb7fda14d8424f17dcd8a1f5d18c19bdc01cc57a6340016f9254d82b659cca51a68643124aec"}, @mesh_chsw={0x76, 0x6, {0x40, 0x81, 0x39, 0x7f}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x179, 0x7f, [@supported_rates={0x1, 0x1, [{0xc, 0x1}]}, @random={0x40, 0x82, "b44f8add701352d5aafab502bdd08a433a208c052020034c789774e1eb286081aa025692f833df4e6f394e9b622487ea8dd277c17a952989e942221da2c17e7b99470a2efe64a072baafcf431ba56049a19d1d8787dbf6ae536549cb68e70e1d986a8ef35755b864766c17bc9392f58ee2f94c6d0a62f07851bab43c999e51e3b1a6"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x36}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x3800000000000, 0x1386, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x3, 0xcb}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @random={0x5, 0xb0, "95dccc05c7e422aca23e9c3b7efcc35b10cf40f44c621eef834b9484d3dfedae548628212bdd69ec90c1892acaf351c844d66224bd45858c0504a273fac671749b5e0d8a97cef28aeb63d6407895cc35923b589e71bc47d44dd2f5274c55deda2fecb22c46732d0461748f19facf38c4c002373b8521fd12efe5aca3fc27072dbfe257740a4e6077d88a61d22766a2bb1293a5c17f590272f49e5f273f55fe98d3bab3a33563ba0f6c87cd7eb663b95e"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x46}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8e}]}, 0x1ddc}, 0x1, 0x0, 0x0, 0x5}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r12=>0x0}) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1064, r13, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "25834efb65d4152e2834a57f34197f894a6ffa06aa8989d7cd642d5253a00972af454033d5c8fbfc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x39}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "de2c1d22f99e051d29c87dc566cfb83297cfa6a7c13c1d149086382a2a03a70c6e2170c0739425572398b392435d1ca4a14f6203f60486f5a85542f121e4b6263a7d9d5362c1208f8a162c6155c7a3d5399bc5cfab1973cdf744a5b0f9b388e725049e39018b8fa5e71a77025348f2341736a05fb4d7bd4ff11327cbcd284153dc8777cb2a72f1db4288c4a4f4861941e7e22447302aa58d126a560781cf525f4a4eedb3a4083a7f72b017d4a3fa049b8825b2538a64c872379672498a3340db8144f15f65d19bc81cf786a6677781e1da69afa562370c551d24a34ee21657c7d8fbd2433541c1170ac09f5f50ce5968b507812839101dfcd855b9fd11616ed7d35592c766954875389b259b357b516846db072d298a9fa72c5889aa34c980e91039289ecb104dee8e969377df8122b410f5bfe84bd372698cf63d4aa010b63aef2695e334bee24c3740d48c502ee300cba10d308f95709a8d63fb85dc9edcd30aba7924e088ad9e858c2b526400712ffd0059c772305d19f23965506b1601367fedc0ab12aaad4444bfa4a711217f872dd98b78482174046b834fdfdbe99b08744386868ef01499b6af62f13b4ab65f7aa34e09dbe3c233570876794987bb6b4211d35f4f54a394a68d008b4377665e860e70215dc12005842bc5c712c132030957c6af3b77c63fde82b494219d7cded9ed0d482b28942b8d7e3ff2143357e933fe3c3ca9685ec17ba725bfdd442b7ca70bb3487da01124d12800da8731a476ec95d66c013fb8c7dbd2d8bec3b353ca590a3fd32754e71b53bbe9e718e9f3d1f9512994b047cfcee07ac6219bf1ca5e5abddf03e183048bc95bfb03e0be56c22ce9c406cf94b39a630b29625595d073a2b1613a60fe9d3d25bdb756550b0ddf506ec1cc5c988781b2a6cca8ae87bba386e1f1b7af98a0569a86b1c58bc748ba05cb2ced3969b0ff1b97e4a5a77ebfd4a43a1331a002bd0bde5c5f5ca4c331dc6419dc50946a88aa4dcf0bc9c23bbbd2a1e37188370da394a8ce59ceb384cb42e6fdd99b934f9d638e49cfb94e2c0319e62e9ff6d9e104d8aa3589366473fdc62dc6a1b25165a706dba452e3ed19cfe00fe651c6a071da9657eef1b0f31e1fadc1986a181a18692d1b58cf675208137fe09c3a38a40d94d6ec7f20bbd51b7a2bc62b4e7514e96cf2dcf21b39b57151a8d97a7962a5ce43a8239a77d88209c99eb4ed8545982af83c26eef6307e31279d9d3416ee916f3be0f2ecb55d2cd67ee1accb502c4aaeec2bd4b83597d777bf1dd410570ca0ce011377eff06cb864c2aac91bc5257591e5d8966e1201f46fc7135c12fcbc83aa033e63171cc0438351c98e1d5ff3ba4da142970aaec45d15f22eddbde14f80f1847be3b22076e0c3713bc0628e8333e451e7544d756aef330cf81c717521bc085408e6de28aba3e934785d6cb42de6ee7abb880c26c4801ad277697bcf7d951398ff0f511e9b6aa88512f2e345a11a4405812357793427597ca5bb31bac8da3b1eed59e01fe228840c1cd6a64b75b06a4c7258a014415951fa5319d474799da814fa701be52f6c0d5b85a615b722ca038fbf50485a541cae8670a9673502e6aa4eca6526c97d6223a7143273a1172d4a3717b2caab79107fa1d7eceb9e778132c93fe7bd9f4e80ca49b96efda40853709ce28e3e118c5d83c31c68a91ea6a97a1dae339172f2c04a31f4fc2119cc503744664a8c79725614f6f47bf058bff1578bc6004f6004cf6af4439d9e8a3de707723721af5acffe9b66f71db1193e1cd33aec6e0512013237ee12c4495faf8b6d07709fca83d02962bed9b3709d5430a4f95917e869ca88b2f6369146cc64e81ebde5cf1a1be0d7267b26f5636c7daebed9ae4f7d262db9f39c62a295cd4d17779ead36299a6d0e2c9ef24b759c2556b443f6a8e2d678b55617271abb87c5de45aff09ec3ffd3493bee6a6bf8db5894a599e6ad41f84e733b5b47091380501b4fd76923348e1c8675a287b16dac4524c2202397d38680948bab67033a61b260ed24a53202f755bfd2732234e86049d69719c07c0516949627227709edefb7d0a2b6439d29c2f124e8e8cf29120fab3b8c17365300e9a648d4f5a3bfcb1da26ede835f7e36e6387c8f87c853f4aa2b0ce81bea27121c1333c0453013e2d68fd001abd15b80070670fa4b4a25c005e3598eab6a87bc8bc7537b2c4cf6126357a2d1e69163c6acc6df7be1d3f472954c556d9aa198f091fba448613b8983e69f6100a62dfbc4e71560c5ebb9d418b789566c7f858b5fd43d5743a4fb5effa38313d16fcb03cea7569288ce81a3ea391dd97745bf41bd5f6a7cce4de04eb199f69c9926bd3d267520a7f0e11679c3dc5a8b3a3c314a4216b7a19292792efde35cb0713479c3ab15dfd18edec53c78b4ff5b75e795c1173263631b581a37eb0b2b4c65566909d75933421c97cbde3ff0d5611e6c1b6a66a62414cbfd1b43ca2a3df573a4c901fe79f925eaace28f5e439ed5371e6a1d1e846603c549f6c6f8fcfe9ba9caa928389f7997f7dcaed931887f09edb0df62cd73c851a2ef476b3e8c551a9df5f5f6012fe1db4a70a73d4ed155ae2d97e7e0c4ca7c30d3be7e717faf7c54c8a4bb51f3bf90960a407eeca2c203739bec14320dc61a4d4ed7af0233c842f75edc1f500f2ffe9f151c576cfb54d4270d2a87b36c982f0888bf5fc76f4e213b965c15da5d9e3690f7f54243ba2e47b57547763a63542e14445283ac4611f3d22ae7735be4b024e33f85ddefcb233a11f368dc5c9a24ca35e9b6f981c33d92440b658658c1eb7b9f5186c41213449fd0e64b03ab0225cc6e9d63a1df5f8f0c2439888f50f8832d9ab653ae88ef0f4eff16963b9d877e0d84d151b01cf010a38cf9dd506d1474443976e87ede2641d295b56947af3fcc35a1b96ee69bc8e95921bf314d0825be97b03a71185a7beac8e232d448f5e0a777b6d1ed2f735af14034328d161dc6fc470cb79c12721cabbb6570b3cbce6d06f251dc3b5360c23192041f6d4794391437149899fc70071721d0a2c864dbdbd78379cc621369cf53f7a50e9e8e4d5f3278aaea5cb3d15dbca48fd538f4056c58427ff1327ec62a5a90485ba3433b2279b4f4fffd279c63d0676051af73d230220867883be3dc924e360b81bf6bab03f0b652036a59e3bae016098acaa644b72b674aed31d476ab0ae039f7a3892a2122cdbd50b4dd64bbb91a46616bd3d267b024bf2c3081ac6b4cc0c0348f5ae7b267509c63968e29d0ef6b18748e9e689f78d75f9290206ae9528e37eb1e721e08730f5238854d258b9e4a788edb9bb4af49d263ae55b4e284b8df3b86fbd6476edacd6163b37c8db6f9c677529cab35a12d000d56ae630a6e1a4664301adc046de79eea2e8a1585e9423b80b5fecf14080166d903e0043bfd5d32bfc598bf650bbdb2cee9749f623b2501253df57e5218dc624c6968cd3380da106c33918ae8c4fcef4dbf701e21892ece2c346fd551013cc603ccafff5b64a5c7c53c71ff82022ec21d84dfa7df31677644360873d74432f93f116332c932dc1cad669fa403e2eebb5e3f30758fa4f3bf56816ddded7e50361110d3602375af8b452dd4c6b8838b936444091f4ccfa65db32810ebf40b7c9c39525c1852666334767dfae75f531b1828e656a334ae89227582efca7444d5e2acb5d964acb497c283001e2c9437dce489b65ddda4f1d3b7f5d1c2995dc67c5e9eb314d06d9e5985bf54a20abfa9e66776f5d48c8a4c40b0fcce77c91bd1a38858581426dd6e4264fab10206f4d3a0b2a04b1b3b7f25c53f64930e8ea00d827384bc19e7f9537b5933b25312454f5fe81ae97bdae9de3c3f801fff60f7eeb74dcc8813d1e1531c33ed997b030f6638505f9cc920067285766a8ea04ddb5985a88e7f97497732280c84e2c456d309bcdde39bc5348f85d66bf2e65ba4115c246dad90bdf7a0e9353b1af9c4a8ff663344360f376fc3f4dc0fddf5a1a7f6da8bf31b9f28e6b29a05b1df7393bcefe5c1cfa0a4ac3fd2327d6dbe41243e9e8aba65055abacc4e3e8fc319180c1aeb9711923261933e1f66cfde24eed4f193455c9c10ba370949f0b294eb852ca94bc51618c235423da15d0a72fa4ef30ba9388046f907163f76dcdb789c1b4096d28ee0f5c1dda639b27bb9baf2d64db7b63ea50360f600fdbf370501c6606956fd7adae4d63739a79df31af3abd05e88b4734f6c3ec84d86480425a16f9bfb03cedf8da17c569d99ba248e9ce8eb69900c10cc12543fa1051d64a4443c024e0658980c5491021ef9849d344d497961176eaf6c09464c69f9b56a95439e847043690d4b712d1eafdf80ceb7616f89cf15a93c2c3611e60f92d469bba24b4ff523a9249ca878fb47071719104ae8e7e66b0021df01e104d67571ae4f2ad45ee628218d4618a535cf497142fee64487f6f9983bce23a205c2b6b3cef2140cf8b58c741fd8c0e019d983d8ef4e65bcfc7020b4c862506b1e4e94a3049181f0f435525ec550a92c4faa4aed00ff51fb8ce5b5daa8718dab9b4253ed4a3e3dbb1002e2ef92232fb9bed4a4ef93effbd389f9c71c79d97998eb07a646f779d9474eda1e319adac6621355d7d389b52170e76417d47168e5fa907d7b07fd88884eebf25e63acc36d5d707a202be2a308d84a90ee13db0c9010abe9184c00f668009c8ba766ce9787f2c12653d8f2a916629ee46832205b17f940ef91329c01a5faeb8dde7be28d8bd3da06160559df2530eb9cd07d2fcc2a280f44bf3a4025942cac3eb974bcfec29da73866fb481a41102f02f78545faf4a9632c7033a77d18df092ff65fcc800532da7586aa90ddd00aada0ab67ff13f46009008b1edea12dd94fb85f05769803f4175e20c7207250c21533d4dd182b5503e71cf9897dc3196a07a6d04ceb3ba3ee3ed961b9bd28622b900195274b2e33eaf0c71d95a127db80ff32448c33929bafda28a803506973283a598456b2e1d3ce7852cbb4af01513cb07d37a6b56729c3a0c92ff6c0b77a5f9ca2a89c09af24635d6d3a5830e46a6842a18d68eec0e2c84953860b67f3a2385e25401ab63ad64f3f486f58fd9319b25ea1b248c0c1d76e97d9a9b5c038ea91637b9aef48f4e1cb74df237aaa9e1b287ef1f46989835e2d4708c95c6e8d6f0e8ec3ad68e1c6450f06a0edd0918bb8c581736c05d0b627135942ad3feb08eda2af1ed9328c0291eb416d4aef66332920ffd149d003a88befa81117a42e288915bfbbb981e4787907ca8dd0cf164b46aea93e54612431d08bd3308e3c876307a060003f0c1b0edea9b0f58d30acd2355be11c76b5000b0f4dc3749f0de307e4d8f11fe70dee83fdb9fd6fcbad95d15a675e8db849a65b0d2379c340ccb300fcdd226658df174212c505f3b77a35fe738b617f913bc03969e237025dce482bb7f36209bd07416758ced0ef997e84403bf1137c57daf47d9de9a5171bf90d1f030117767624b0a6bb67eb12e1a63d4987d583c1df46b2b5515145950a061eb37766b86d05d0751a930a165f55c953d68d0c9a352a7b0068b907355a78df7aa8ee56aae9a58c60e8b06802ea7449419002d92f8d9abcbf18d66bf25872a4ce8c6315bcd04e789d2ed19a33674b57cac3543654782f7580a715213f318818e9575b75b1a0c39a5c19db33b8436435ba9f4310d057600b8c2041b81e37a01d0e7ddce2fb8c8476c8f46c194d4f927daf11e0349151255ea5f17715181e36ec1fe5946f9b326ad174fc5ff440734c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1064}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300fade296146c3648b8614f06ab49690add38182eb6e9ef621f838197ed09eb9df4e648371734ada23719c951385084e8ed18105bd2b4bd3b5abf3620d18d2a2c2e5d4eda04cf188bc4c81a951f439b2dfbc8283e8eeeef2cd2edb173d942e8da8e5c586ce0e6b3ce4ed4ac200454279a0a54f7c4e6961eedec8f7af94e611718da9f67cf8ba21a7cc82818ef5b87c0cc52918882e3138ab5f1897bc6b31", @ANYRES32=r1, @ANYRESHEX], 0x28}}, 0x0) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000001540)=0xc) (async)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
r15 = accept4(r14, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r15, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r15, 0x1, 0x53, &(0x7f0000001640)={0x7, 0x7, 0x2}, &(0x7f0000001680)=0x28)

23:48:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:55 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x300}, 0x0)

23:48:55 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc}, 0x0)

23:48:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
pipe2$watch_queue(&(0x7f00000016c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r2) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000190000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004024)
r10 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r10, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001a00)={0x1ddc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d8c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x10dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "35c1ce8fc75886aa16b6569dc4e338b73b8313bed76cc9ffee95a5105c09387e49b2bb4a9e676bc720344028ddcbdbf28052141a247490d7ea502a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7b, 0x2, "041a2ee4da029cd892387ada58d0064535839e1739f44a1d1513c6d875b4fe980dd68afaac96df23d24970e245392f68bb222829bec1016e5751c849270ec5f55d4df65f456be45452a2c805eb4942682b5c19bfd59e72e7d7f7e1a3332b03d681bc82885321ef1ba379f87752f0bcbe0c454e1468010b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c4, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xfb, 0xab, 0x3f}}, @perr={0x84, 0x2, {0x6}}, @measure_req={0x26, 0xd4, {0x9, 0xfb, 0x0, "aafe1d7c202ef4e3138f099c818ac2442b0330324cc902cb99728237e7335228ba0f9dfc83e5aa14a815afbb6c251a208c3e7da585517ccfbf47cba491735dd17fd4df0305b40ebcb2d673b2a37cef5e0dfca73309c23ee36f31d6d18136982017d29a1a3cade812229bfdde22a2e47a3f570bfd1b71e94a7f84ee31bf69b9a4a22df33ae0f4a066b097b356c0fc3ad33437c238b179dee2b272bb4fd80d6aa925c10592b18d883ca46a852057b6226b872ea3d16b1c2254cbcb093e92c878d9dcbf6de2bb35af34e3393f807574a9fdd9"}}, @ibss={0x6, 0x2, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb2, 0x80}}, @perr={0x84, 0xd4, {0xa8, 0xc, [@not_ext={{}, @broadcast, 0x401, "", 0x8}, @ext={{}, @broadcast, 0x4, @device_a, 0x32}, @not_ext={{}, @device_a, 0x2, "", 0x24}, @ext={{}, @device_b, 0xe7, @device_b, 0x12}, @ext={{}, @device_a, 0x0, @broadcast, 0x1}, @ext={{}, @device_a, 0x6, @device_b, 0xa}, @ext={{}, @broadcast, 0x400, @device_a, 0xe}, @ext={{}, @broadcast, 0x6, @broadcast, 0x28}, @ext={{}, @device_a, 0x401, @device_b, 0xe}, @ext={{}, @device_a, 0x7fff, @device_b, 0x3a}, @not_ext={{}, @device_b, 0x6, "", 0x42}, @ext={{}, @device_a, 0x3, @device_a, 0x2c}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xdc, 0x80, [@measure_req={0x26, 0xd6, {0x80, 0x7, 0x7, "89564c068e7f201729726fe83197d1279817a2d66fd68c76104dea69d65ddac530572f65cb33c105609b271080d50d2052da0f91cefb57da901004130c8eb4aaf18d1e33a8757bafaafd5ffb1209608c0c9997fb71cd150b32c12ccd2c08aadeecdbcffa8cf0e44eac757b0a860bb1df3c5758b4c06be119c05fdf08fd88a45cc7460c827daa87540adb87cf74aa9426da26e92ecdc903d3881de6c5cd6e51094597e735190d13ece9bad7e29174f09653b966dcce88d447749952c260aff5432c25043b45c524b2683830860321c079d5d015"}}]}, @NL80211_ATTR_PROBE_RESP={0x7e7, 0x91, "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"}, @NL80211_ATTR_IE={0x9d, 0x2a, [@random={0xf9, 0x8f, "c15a4c5b77e0ac9836c8454ebb68660fba046bd02515ce74c5b29685944450d804f2f03fb0638fe17d3ebd2d94d154e45eed8f9977e45660acee074a7551193f118ca325a392d91d88c92b1f4437d0cf1d1519b62983edb121d245bb2559d5e10cf37ee7c9febf412ddb7fda14d8424f17dcd8a1f5d18c19bdc01cc57a6340016f9254d82b659cca51a68643124aec"}, @mesh_chsw={0x76, 0x6, {0x40, 0x81, 0x39, 0x7f}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x179, 0x7f, [@supported_rates={0x1, 0x1, [{0xc, 0x1}]}, @random={0x40, 0x82, "b44f8add701352d5aafab502bdd08a433a208c052020034c789774e1eb286081aa025692f833df4e6f394e9b622487ea8dd277c17a952989e942221da2c17e7b99470a2efe64a072baafcf431ba56049a19d1d8787dbf6ae536549cb68e70e1d986a8ef35755b864766c17bc9392f58ee2f94c6d0a62f07851bab43c999e51e3b1a6"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x36}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x3800000000000, 0x1386, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x3, 0xcb}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @random={0x5, 0xb0, "95dccc05c7e422aca23e9c3b7efcc35b10cf40f44c621eef834b9484d3dfedae548628212bdd69ec90c1892acaf351c844d66224bd45858c0504a273fac671749b5e0d8a97cef28aeb63d6407895cc35923b589e71bc47d44dd2f5274c55deda2fecb22c46732d0461748f19facf38c4c002373b8521fd12efe5aca3fc27072dbfe257740a4e6077d88a61d22766a2bb1293a5c17f590272f49e5f273f55fe98d3bab3a33563ba0f6c87cd7eb663b95e"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x46}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8e}]}, 0x1ddc}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1064, r13, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "25834efb65d4152e2834a57f34197f894a6ffa06aa8989d7cd642d5253a00972af454033d5c8fbfc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x39}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1064}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300fade296146c3648b8614f06ab49690add38182eb6e9ef621f838197ed09eb9df4e648371734ada23719c951385084e8ed18105bd2b4bd3b5abf3620d18d2a2c2e5d4eda04cf188bc4c81a951f439b2dfbc8283e8eeeef2cd2edb173d942e8da8e5c586ce0e6b3ce4ed4ac200454279a0a54f7c4e6961eedec8f7af94e611718da9f67cf8ba21a7cc82818ef5b87c0cc52918882e3138ab5f1897bc6b31", @ANYRES32=r1, @ANYRESHEX], 0x28}}, 0x0) (async, rerun: 64)
getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000001540)=0xc) (rerun: 64)
r14 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r14, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async, rerun: 64)
r15 = accept4(r14, 0x0, 0x0, 0x0) (rerun: 64)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000) (async)
recvmmsg(r15, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r15, 0x1, 0x53, &(0x7f0000001640)={0x7, 0x7, 0x2}, &(0x7f0000001680)=0x28)

23:48:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:55 executing program 2:
syz_clone(0x8106480, 0x0, 0x0, 0x0, 0x0, 0x0)

23:48:56 executing program 3:
socketpair(0x25, 0x1, 0x80000000, &(0x7f0000000180))

23:48:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socketpair(0x2, 0x3, 0xfffff800, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

23:48:56 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xf}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)

23:48:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:56 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080))

23:48:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socketpair(0x2, 0x3, 0xfffff800, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async)
socketpair(0x2, 0x3, 0xfffff800, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)

23:48:56 executing program 2:
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002b80)='tasks\x00', 0x2, 0x0)

23:48:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:57 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247, 0xf7}], 0x1}, 0x40)

23:48:57 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {}]}]}}, 0x0, 0x36}, 0x20)

23:48:57 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x3}, {}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

[ 1130.342350][ T5071] kworker/dying (5071) used greatest stack depth: 4296 bytes left
23:48:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socketpair(0x2, 0x3, 0xfffff800, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

23:48:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x84, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0x84}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:57 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xf, 0x1}]}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5, 0x8001}, {}, {}, {}, {}]}]}}, &(0x7f00000006c0)=""/184, 0x7e, 0xb8, 0x1}, 0x20)

23:48:57 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000500)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

23:48:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)
r5 = epoll_create(0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
ppoll(&(0x7f0000000000)=[{r2, 0x10a0}, {r5, 0x2010}, {r2, 0x1000}, {r6, 0x80}, {r2, 0x40}, {r7, 0x4040}, {0xffffffffffffffff, 0xa}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={[0xde70000000000]}, 0x8)

23:48:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:58 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x7fffffff, 0x0, 0x1f, 0x0, 0x1}, 0x48)

23:48:58 executing program 2:
syz_clone(0x4c154a00, 0x0, 0x0, 0x0, 0x0, 0x0)
getpid()
gettid()
syz_open_procfs$namespace(0x0, 0x0)
syz_clone(0x40000000, &(0x7f0000000480)="0e0d3191ff05c51ba14e89ca", 0xc, 0x0, &(0x7f0000000540), &(0x7f0000000580)="c1a973f21e5b95eb671a4132af5c36378c6a660a41cfc371772c3e31d31bd191fcce5ee4ee6983b41d6236c018db96977c304bb34428631ff2c4b1e28555b950d279425487ef0024a26535f36c3848b0ab58a0dedf264903ff8bfc92aac7156ca26a401f07358402b0d4cfc53975ef05")
recvmsg(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/35, 0x23}, {&(0x7f0000000a80)=""/19, 0x13}, {&(0x7f0000000ac0)=""/228, 0xe4}, {&(0x7f0000000bc0)=""/191, 0xbf}, {&(0x7f0000000c80)=""/6, 0x6}, {&(0x7f0000000cc0)=""/58, 0x3a}, {&(0x7f0000000d00)=""/121, 0x79}], 0x7, &(0x7f0000000e40)=""/93, 0x5d}, 0x0)
gettid()

23:48:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
r5 = epoll_create(0x1) (async)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x10a0}, {r5, 0x2010}, {r2, 0x1000}, {r6, 0x80}, {r2, 0x40}, {r7, 0x4040}, {0xffffffffffffffff, 0xa}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={[0xde70000000000]}, 0x8)

23:48:58 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xf, 0x1}]}, @struct]}}, &(0x7f00000006c0)=""/184, 0x42, 0xb8, 0x1}, 0x20)

23:48:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:48:59 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001940)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_freezer_state(r1, 0x0, 0x0)

23:48:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0) (async)
r5 = epoll_create(0x1) (async)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x100c, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x10a0}, {r5, 0x2010}, {r2, 0x1000}, {r6, 0x80}, {r2, 0x40}, {r7, 0x4040}, {0xffffffffffffffff, 0xa}], 0x7, &(0x7f0000000040), &(0x7f0000000080)={[0xde70000000000]}, 0x8)

23:48:59 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e}, 0x0)

23:49:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, 0xfffffffffffffffe, 0x0)

23:49:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r6, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9ed, 0x7c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x4, 0x0, 0x4, 0x2, 0x7fff, 0x10]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000015}, 0x4040000)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:49:00 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:00 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001940)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)

23:49:00 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000680)=@raw=[@map_val, @alu], &(0x7f00000006c0)='syzkaller\x00', 0x8e, 0xdd, &(0x7f0000000700)=""/221, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

23:49:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc4, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000093c0)=ANY=[], 0x68}}, 0x20008000)
recvmmsg(r5, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r6, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9ed, 0x7c}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x4, 0x0, 0x4, 0x2, 0x7fff, 0x10]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000015}, 0x4040000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}]}]}, 0x28}}, 0x0)

23:49:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a04000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000200)={0x3000})
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_STP_STATE={0x8}]}}}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:49:01 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='+', 0x37fe0}], 0x1}, 0x40)

23:49:01 executing program 3:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000240)="e6", &(0x7f0000001240)="b5"}, 0x48)

23:49:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d21209000000000008000000d1800700000000aad675b4", @ANYRES32=0x41424344], 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="413a0f30"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0xc8, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}, @IFLA_CARRIER={0x5}, @IFLA_OPERSTATE={0x5}, @IFLA_MTU={0x8}, @IFLA_ADDRESS={0xa, 0x1, @random="e2adea2a9d1c"}, @IFLA_VF_PORTS={0x40, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/ttyS3\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xb, 0x2, 'bridge\x00'}]}]}]}, 0xc8}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1134.146137][T20899] =====================================================
[ 1134.158074][T20899] BUG: KMSAN: uninit-value in af_alg_free_resources+0x3d1/0xf60
[ 1134.166205][T20899]  af_alg_free_resources+0x3d1/0xf60
[ 1134.171782][T20899]  skcipher_recvmsg+0x6a0/0x1a20
[ 1134.176919][T20899]  ____sys_recvmsg+0x283/0x7f0
[ 1134.182022][T20899]  ___sys_recvmsg+0x223/0x840
[ 1134.186909][T20899]  do_recvmmsg+0x4fc/0xfd0
[ 1134.191597][T20899]  __x64_sys_recvmmsg+0x397/0x490
[ 1134.196912][T20899]  do_syscall_64+0x41/0xc0
[ 1134.201633][T20899]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1134.207735][T20899] 
[ 1134.210147][T20899] Uninit was created at:
[ 1134.214715][T20899]  slab_post_alloc_hook+0x12f/0xb70
[ 1134.220091][T20899]  __kmem_cache_alloc_node+0x536/0x8d0
[ 1134.226323][T20899]  __kmalloc+0x121/0x3c0
[ 1134.230915][T20899]  sock_kmalloc+0x128/0x1c0
[ 1134.235589][T20899]  af_alg_alloc_areq+0x41/0x2a0
[ 1134.240643][T20899]  skcipher_recvmsg+0x514/0x1a20
23:49:01 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000009c0)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2}}, 0x10, 0x0}, 0x0)

[ 1134.245965][T20899]  ____sys_recvmsg+0x283/0x7f0
[ 1134.255715][T20899]  ___sys_recvmsg+0x223/0x840
[ 1134.260598][T20899]  do_recvmmsg+0x4fc/0xfd0
[ 1134.265535][T20899]  __x64_sys_recvmmsg+0x397/0x490
[ 1134.270853][T20899]  do_syscall_64+0x41/0xc0
[ 1134.275462][T20899]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1134.281806][T20899] 
[ 1134.284219][T20899] CPU: 1 PID: 20899 Comm: syz-executor.1 Not tainted 6.5.0-rc4-syzkaller #0
[ 1134.293183][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 1134.304967][T20899] =====================================================
[ 1134.312775][T20899] Disabling lock debugging due to kernel taint
[ 1134.319045][T20899] Kernel panic - not syncing: kmsan.panic set ...
[ 1134.325573][T20899] CPU: 1 PID: 20899 Comm: syz-executor.1 Tainted: G    B              6.5.0-rc4-syzkaller #0
[ 1134.335895][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 1134.346093][T20899] Call Trace:
[ 1134.349479][T20899]  <TASK>
[ 1134.352508][T20899]  dump_stack_lvl+0x1bf/0x240
[ 1134.357403][T20899]  dump_stack+0x1e/0x20
[ 1134.361746][T20899]  panic+0x4d5/0xc70
[ 1134.365805][T20899]  ? add_taint+0x108/0x1a0
[ 1134.370397][T20899]  kmsan_report+0x2d0/0x2d0
[ 1134.375086][T20899]  ? iov_iter_extract_pages+0xae3/0xda0
[ 1134.380896][T20899]  ? __msan_warning+0x96/0x110
[ 1134.385835][T20899]  ? af_alg_free_resources+0x3d1/0xf60
[ 1134.391472][T20899]  ? skcipher_recvmsg+0x6a0/0x1a20
[ 1134.396764][T20899]  ? ____sys_recvmsg+0x283/0x7f0
[ 1134.401880][T20899]  ? ___sys_recvmsg+0x223/0x840
[ 1134.406899][T20899]  ? do_recvmmsg+0x4fc/0xfd0
[ 1134.411688][T20899]  ? __x64_sys_recvmmsg+0x397/0x490
[ 1134.417090][T20899]  ? do_syscall_64+0x41/0xc0
[ 1134.421876][T20899]  ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1134.428138][T20899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 1134.434156][T20899]  ? extract_iter_to_sg+0x3754/0x3890
[ 1134.439751][T20899]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 1134.446195][T20899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 1134.452202][T20899]  __msan_warning+0x96/0x110
[ 1134.456970][T20899]  af_alg_free_resources+0x3d1/0xf60
[ 1134.462461][T20899]  skcipher_recvmsg+0x6a0/0x1a20
[ 1134.467609][T20899]  ____sys_recvmsg+0x283/0x7f0
[ 1134.472564][T20899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 1134.478571][T20899]  ? skcipher_sendmsg+0x100/0x100
[ 1134.483790][T20899]  ___sys_recvmsg+0x223/0x840
[ 1134.488676][T20899]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 1134.494694][T20899]  do_recvmmsg+0x4fc/0xfd0
[ 1134.499304][T20899]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 1134.505746][T20899]  ? do_syscall_64+0x41/0xc0
[ 1134.510513][T20899]  __x64_sys_recvmmsg+0x397/0x490
[ 1134.515738][T20899]  do_syscall_64+0x41/0xc0
[ 1134.520326][T20899]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 1134.526401][T20899] RIP: 0033:0x7f9439e7cae9
[ 1134.530995][T20899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 1134.550785][T20899] RSP: 002b:00007f943abc90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1134.559356][T20899] RAX: ffffffffffffffda RBX: 00007f9439f9bf80 RCX: 00007f9439e7cae9
[ 1134.567463][T20899] RDX: 0000000000000002 RSI: 00000000200091c0 RDI: 0000000000000005
[ 1134.575554][T20899] RBP: 00007f9439ec847a R08: 0000000000000000 R09: 0000000000000000
[ 1134.583650][T20899] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1134.591831][T20899] R13: 000000000000000b R14: 00007f9439f9bf80 R15: 00007f943a0bfa48
[ 1134.599947][T20899]  </TASK>
[ 1134.603279][T20899] Kernel Offset: disabled
[ 1134.607664][T20899] Rebooting in 86400 seconds..