last executing test programs:

6.563862603s ago: executing program 1 (id=15):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000277000/0x4000)=nil, 0x4000}, 0x1})
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000000000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800)
mkdir(&(0x7f0000000040)='./file0\x00', 0x31) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x31)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
read$alg(r6, &(0x7f0000000240)=""/184, 0xb8)
r7 = syz_open_dev$video(&(0x7f0000000000), 0x10001, 0xa0000)
ioctl$VIDIOC_S_FBUF(r7, 0x4030560b, &(0x7f00000000c0)={0xb1, 0x25, 0x0, {0x4, 0x6, 0x32314d59, 0x1, 0x5, 0x6, 0x8}})
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)

6.358474458s ago: executing program 1 (id=16):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fanotify_init(0x1b, 0x40000)
fanotify_mark(r1, 0x219, 0x183b, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@nl=@unspec, {&(0x7f0000000180)=""/74, 0x4a}, &(0x7f0000000200), 0x45}, 0xa0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_setup(0x1, 0x0)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x76})
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4400}]}, 0x30}}, 0x2c90)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1)

6.093376838s ago: executing program 1 (id=23):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
recvfrom$l2tp(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0)
sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback, 0x4}, 0x10)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x4848, 0x2})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xffffffff, 0x3, 0x2, 0xffffffff, {0xa, 0x4e22, 0x5, @mcast2, 0x100}}}, 0x80, 0x0}, 0x20000820)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="60d6b068fc45"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x18, 0x0, 0x20000000, 0xfffffffc})
mlock2(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0)

5.969267143s ago: executing program 1 (id=25):
mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00')
read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020)

5.890252515s ago: executing program 1 (id=27):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r2=>0xffffffffffffffff}, 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00030a010102000100000000000000000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb0000000000000000000000000000c00612211fc7920eaf8628317c9c281a"], 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="9dbaac999f69835fbc2825cd64f1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.809968446s ago: executing program 0 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
r3 = fsopen(&(0x7f0000000800)='iso9660\x00', 0x0)
fgetxattr(r3, &(0x7f0000000840)=@known='user.syz\x00', 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x80)
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xdd)
keyctl$set_timeout(0xf, r5, 0x80000001)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x210, 0x0, 0x104, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004080}, 0x48085)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@delqdisc={0x470, 0x25, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x2, 0xf}, {0x9, 0xffe0}, {0x10, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0xf4, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6378, 0x0, 0x2e5a, 0x4, 0x3, 0x9, 0xd2, 0x9, 0xfffffff7, 0xf, 0xfff, 0x1000, 0x1, 0x6, 0x80, 0xcb, 0x8ae, 0x9, 0xfff, 0x8, 0x5, 0x4, 0x200, 0x101, 0x9, 0xe3, 0xd, 0x80, 0x9499, 0x4, 0x9, 0x8, 0x1ff, 0xe6d79c37, 0x8, 0xfffffffa, 0x8, 0x6313190, 0x7f, 0x2, 0x5, 0x9, 0x2, 0x4, 0xb, 0xf, 0x9, 0x2, 0x0, 0x8, 0x2, 0x2, 0x7fffffff, 0x6, 0x8, 0x6, 0x6, 0x9, 0xc, 0x9, 0x81, 0x4, 0x6, 0x5, 0x7, 0x6, 0x81000, 0xfb50, 0x8, 0xffffffc0, 0x7fff, 0xfffffffc, 0x7, 0x16, 0x0, 0x2, 0x3, 0x7eef, 0x5, 0x5513, 0x5, 0x7f, 0xfff, 0x2b72, 0xffff, 0x6fe, 0x2, 0x1, 0x0, 0xfffffc01, 0xb, 0x4, 0x175885c4, 0x8, 0x0, 0x3, 0x80000000, 0x1cc, 0xfff, 0xf249, 0x5, 0x5, 0x8, 0xfffffffb, 0x18, 0x4, 0x4, 0x3, 0x3, 0x4, 0x6ab, 0x0, 0x1, 0x3, 0x79f5bfdc, 0x9, 0x7, 0x8, 0x7, 0xfffffffe, 0x6, 0x5, 0x100000, 0x0, 0x5, 0x5, 0x8, 0x3, 0x4, 0xcd1, 0x40, 0xd, 0xfffffffd, 0x4, 0x0, 0x5, 0xfffffb2a, 0x72fadda9, 0x800, 0x4, 0x7, 0x5, 0xc, 0xf4ac, 0x4, 0x2, 0x3, 0x4, 0x64d, 0x8001, 0x5, 0xa6, 0x7, 0x8, 0x5, 0x1, 0x0, 0x9, 0x8, 0x2, 0x6, 0x80000000, 0x2, 0x4, 0xec, 0x5, 0x3, 0xfffffff4, 0xe7, 0x7ff, 0x2, 0x9, 0x5, 0x4, 0x6, 0x0, 0x40, 0x8, 0xe8f, 0x3, 0xa, 0xf, 0xd03, 0x6, 0xa, 0x1, 0x8001, 0x4, 0x0, 0x123cb9fc, 0x7, 0x5, 0x9, 0x6, 0x995, 0x1, 0x6, 0x1, 0xfffffff8, 0x5, 0x626b, 0x7, 0x7, 0xe8b, 0x5, 0xfffffff2, 0x4e, 0x5, 0x2, 0x2, 0x8, 0x1, 0x7, 0x4, 0x2, 0x4, 0x6, 0x718, 0x807, 0x8001, 0x8, 0x1, 0x6, 0x5, 0x8, 0xcaa, 0xc30, 0x3, 0x2937, 0x0, 0x4ad, 0x2, 0xd97, 0x5, 0xe4d4, 0x80000001, 0x7ff, 0x5, 0x8001, 0x5, 0x72eba471, 0xc11c, 0x1, 0x80000001, 0x2, 0xfffffff9, 0x8, 0x1, 0x3, 0x0, 0x9, 0x3, 0xffffffff, 0x5, 0x7fff, 0x8]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x1963ade3f6f20373}, @TCA_TBF_PBURST={0x8, 0x7, 0x11d4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x470}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r10=>0x0}) (async)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r13, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async, rerun: 32)
close(r13) (async, rerun: 32)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r14, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r14}) (rerun: 32)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000020000000000000006000000850000002000000095005352a6980000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec621d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r10, 0x3, {0x1, 0xfe, 0x4}, 0xfe}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2}, 0x38)

5.719848361s ago: executing program 1 (id=32):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x46}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x5, 0x0, {0x93, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x7, 0x6}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}, @random={0x1, 0x17, "4adb10d58925c79910d3d1e6408b48cedbe8844d3a9b63"}]}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@challenge={0x10, 0x1, 0xa}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000)
socket(0x28, 0x801, 0x0) (async)
r2 = socket(0x28, 0x801, 0x0)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0)
pwritev2(r6, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0x81, 0x1a)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x5)
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001980)={r3, &(0x7f00000008c0)="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", &(0x7f00000018c0)=""/181}, 0x20)
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

4.869603647s ago: executing program 0 (id=45):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="660ff7d666b8010000000f01c13ef30f1ab518fb66b9910200000f32d307660f38808000000f35652e640f01caf22e369e66b9800000c00f326635004000000f30", 0x41}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype3={0x5, 0x8}, @flags], 0x2)
r2 = eventfd(0x140000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x3, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x501100, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x2, 0x7, r2})
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r4, 0x1847a000)
ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000200))
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000240)={0x2, 0x10})
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f00000002c0)="557b6ba6c79dd48627f7fcc8c12b4b2f7045b96b6d498e92cd9c25d5d7b6b45a8dc4e07104118efe88388145935b7897d8df7389ed7b20ef3fb307170e0fc1268f283dc1dcad72c71a52626ea7b8e21d1bf2276e5824bca039e53c1bc52cb25d59350a86d3865e71c0d7736b306c47ce397aa9715fc3a6521602b22cd6852ab1baba407bf94ad9e171d3d7139294df3e790304e7a69a9a2d7132ca01370df70426b19912133b8b8416d7abaeece75618a28ff9173a4e65b8fd621391a10d8ccccf8692a1326e80fc9e936f390dab9c4e7b6b7adfcb142dee1281a380e332eb8f75509b275fbc9beb50e8")
pipe(&(0x7f00000003c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
read$FUSE(r5, &(0x7f0000000400)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, 0x0, <r10=>0x0}, 0x2020)
openat$uinput(0xffffffffffffff9c, &(0x7f0000002440), 0x802, 0x0)
mknodat(r5, &(0x7f0000002480)='./file0\x00', 0x800, 0x1)
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f00000024c0)={0x9, 0x3})
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002500), 0x301401, 0x0)
ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000002540)={"e2876f60a9405dd8d762f6f6aad8056727e908ac03ead7ee7d15407bd2f27f68052b54971aa80f68d43ce9d28ab3f868a5d94a8b0506db3f073882876f5953e6087205bffa43b6b2b2c299d7587745c4e59c06f841f5692a8ddb09818fe7b4b4c7b7a885b2b90d871cbf2e3eaa6cac48de032cc0ec4d7baedc20d15d9f80a0c851f2014cc2d010f643295cec0ff0788a68d398fb5a337f2f0536c758aacf0d1809b2b07fa2b7a3f71b1dc68917d29c4c7cf45e465a67bedc6b05a56c3b4e5c41e72c283f7e7efc946aa2da1ba418c8049839d0630b7f3d83c61570905c2a1fabeafe71b5fa4839bde98ef5f7b28cf0e4afb2cb9466bf57d503f309d0a8035f56a2eab59f6643151e2ddf25163b8f5f71b8a3b2bb901985174445ac858877752a3cfea0bd0691afb8608226cf7a5b2a00ae9986cc2ef38882f2c1b70ac2c967ff80b3e80bb2952e1801e3e5f54f8aacb555af2ae7dc1635de210be65577915d81dfaac9b9559a2b73b0616267f24fbe2720f824f053eb34b7f87c83d490c06f5f75b5895771a707bc29d56baa3f115378dbe387e08a3cd414dee9c3f7198023438ca0e08fff80e51842187153dcc0a7b9c7f599079744469c0f566c2c411434b0dd1d01eb1229ee517e9e742669dae1cb7bf4d8c58df9e9777435b7080ab79a6c857b6cbcf280d0d8aa26d20b7bad13c528b9a2a8873d439e2c5a0347eb3ef6ac56ad96871652c9cdbe4133c661c00f606e38250271a6a46cbf668287c2aeb0b57785563f36fed6db0c7f4de862e826f1a35260a50734d2ca00cab09a50fdcab19799f8d6c9326b2a74bc3e03b6bc3d0b60d02fd6a5641c46a043994d5dc4798e3dc410d3273aee0d411701912e7df8846be857cda42c89a989f1dd345971b8c452748f3e99635408f3e24e0d8888291538c0408e5d4de70ef4ab5dda0492f75beae0a2822441ee86d777c01b6f5f4409e09399228568ab72f44b9a003a91756e70707b4bc0a5cb635c3d951699ee5c13b40adeee388dd8ca7150fc13a70aa232be7c409b969df02da0d122c6f98342033f1d77c6f071b0d60f717e7cdb89c51c78d838445f2a345ebcf3e31a19888a72a0b5f3f1eed42f35d363ae6f14bd01f68d9677a3806d3b0f0f998226a08bb349ee48e861bf74829df07c10a913819410f015085bed40f2bc59f5c2632640e27963622d5f9521086e1d7d8ce7061613dff516709619ba834a26c559d5ddbc353232f080a0edad513253ed9c8a09a3a735830ba55e5e53e4ea2bafc1578f8472665dd941bd3121e546caabed11d7ef88a9c920ccf3248c65e8f2daa1ac64b0474c0b14c77f985a1f0f92bdcc37adcde124b3aa4ceebdb0dc5cd456b28d50f9b895669460cf37f45cc4e0e01225d7094dd2c93d6150954049019fdcfa3b24fb827e16455dcbd76ab2ce1664c93c471dc6ce"})
write$FUSE_LK(r6, &(0x7f0000002940)={0x28, 0x0, r8, {{0x10000, 0x3, 0x1, r10}}}, 0x28)
readv(r6, &(0x7f0000002cc0)=[{&(0x7f0000002980)=""/140, 0x8c}, {&(0x7f0000002a40)=""/71, 0x47}, {&(0x7f0000002ac0)=""/146, 0x92}, {&(0x7f0000002b80)=""/153, 0x99}, {&(0x7f0000002c40)=""/30, 0x1e}, {&(0x7f0000002c80)=""/60, 0x3c}], 0x6)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000002d40))
ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611)
execveat(r11, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002f00)={[&(0x7f0000002dc0)='/dev/btrfs-control\x00', &(0x7f0000002e00)='@{\x00', &(0x7f0000002e40)='(##$(\\/*\xf6-\x00', &(0x7f0000002e80)='{*\\\x00', &(0x7f0000002ec0)='#\x00']}, &(0x7f0000003000)={[&(0x7f0000002f40)='/dev/uinput\x00', &(0x7f0000002f80)=':\\!\x00', &(0x7f0000002fc0)='\xd3\x8b\xa7\x00']}, 0x1800)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r9, &(0x7f0000003040))
fdatasync(r4)

4.10079579s ago: executing program 3 (id=54):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x80)
openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0), 0xc)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x101d0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x134, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x102, 0x4c, 0x0, 0x1, [@generic="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"]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @pid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={r10}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={r10, 0x32, 0x4f}, &(0x7f0000000300)=0x8)
syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x2, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x81, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80, 0x4000, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x63e9, 0x4e23, 0x0, 0x0, 0x20, 0xa0, 0x32}, {0x2, 0x6, 0x2, 0x7, 0xfff, 0x6, 0x8, 0xc}, {0x7fff, 0x6, 0x7, 0xf388}, 0x2, 0x6e6bba, 0x2, 0x1, 0x3, 0x2}, {{@in=@multicast1, 0x4d2, 0x6c}, 0x0, @in6=@mcast1, 0x3500, 0x1, 0x3, 0x3, 0x7, 0xe38, 0x3}}, 0xe8)

4.040876835s ago: executing program 3 (id=55):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @remote, 0x0, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)='|')
ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000240))
write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000100)={0x14}, 0x14)
ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f}]}, 0x28}}, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

4.039404751s ago: executing program 0 (id=56):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000f"], 0x0, 0x96}, 0x28)

1.24581804s ago: executing program 2 (id=60):
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xaf9a, 0x2, 0xfffffffe, 0x2000181})
close_range(r0, r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030)
clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x77359400}, 0x0)
mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0])

950.752893ms ago: executing program 0 (id=61):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbc7081fedbdf2502000000080026006c0900000400d100"], 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014121e140000000000000002000000248feb075110af97cfb402e377b53dd60dd8fba499e5d87765ae129904d3307b6cbdc39dae7690ed4549f8281bcc473ac89e6fe1da8fa8b43815071d7a95c5d392eb1903988705315b5dfaef101ea1df4190c83db70d7795062bcbb29d39ed872484972d78d814707ad84671dc1992508749", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xb}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0c002dbd7000ffdbdf255300"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c010)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r9 = socket$kcm(0x1e, 0x4, 0x0)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
setsockopt$sock_attach_bpf(r10, 0x1, 0x21, &(0x7f0000000300), 0x4)
write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[], 0xfdef)
close(r9)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000840}, 0x2400c085)
lseek(0xffffffffffffffff, 0x9, 0x4)
mprotect(&(0x7f00003a5000/0x4000)=nil, 0x4000, 0x0)

950.455696ms ago: executing program 3 (id=62):
socket(0x1e, 0x5, 0xb)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010001fce49ff000001002ec48e5920dfbc67140002f21ff3922f120d", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

838.594132ms ago: executing program 3 (id=63):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1da, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$unix(0x1, 0x5, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) (async, rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (rerun: 32)
r4 = fsmount(r3, 0x0, 0x2)
fchdir(r4)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1\x00'}) (async, rerun: 64)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$TCFLSH(r9, 0x400455c8, 0x0) (async)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x3) (async)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000400)=0x7) (async)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r10, r10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0)

838.080194ms ago: executing program 3 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x2}, 0xe) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) (rerun: 32)

837.155184ms ago: executing program 0 (id=65):
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeed, 0x1010, 0xffffffffffffffff, 0x85211000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffd, 0x200, 0x0, 0x10, 0x2}, 0x93, 0x0, 0x6, 0xd, 0x4b3938df, 0x0, 0x1, 0xa, 0x5, 0xc, {0x80000000, 0x81, 0x4e0, 0x0, 0x4, 0x45}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000074c000/0x1000)=nil, 0x1000}, 0x2})
syz_clone3(&(0x7f0000000380)={0x220030000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
r5 = syz_clone(0x5002000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000140)={0x1d, r8, 0x3, {0x1, 0xff, 0x4}}, 0x18)
sendmmsg(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="0a6501d3a4f74bd627e7e993e55da8fd2f66421ed1213b599ca5801d079f4b9699a8367b0b9e12f1553495c15307c34659743c6d315373a60171ffb543316d383df1dd837bf8bc2380e04830281e5111a7bdeaaf8f646644c905e9d83473b75c2bf38433feca347e1410f474ec003df72496b98353534a63b8d4d35e3da88d770118cc5e13fb04d03ce930", 0x8b}], 0x1}}], 0x1, 0x48010)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
ptrace$pokeuser(0x6, r5, 0x380, 0x3)
ptrace$setregs(0xd, r5, 0x3, &(0x7f0000000100)="e742a933f37ff726a51f1fb1010f93e96a837b8e11d417e6e3310bf49eea1fce838e98f50839bb743e63989186db03e84f2132ab37439542edad4ac17451f607214b1f357bba9e2928cad039eb1deebd41e71d789bc1bac9e1f17d276ddd7fc1c9685ecee004c924c7df313107c7a2143cb413c0ecbbfe35daa22587eabc97d6548ba84ac5332650ca66edf4453b227ca7ff03de968b419779071b9fb5e2418fe35d3100149b67fe313f9d05f9a987db")
syz_open_procfs(r5, &(0x7f0000000000)='mountstats\x00')
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

831.707664ms ago: executing program 3 (id=66):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000))
socket$inet_tcp(0x2, 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0)
mlock(&(0x7f00003d1000/0x2000)=nil, 0x2000)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x1}, 0xc)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x1b)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000003200), 0x22000, 0x0)
process_mrelease(r1, 0x0)
r5 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r5, 0x0, 0xffffffdb)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8f0}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
madvise(&(0x7f0000068000/0x4000)=nil, 0x4000, 0xe)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)

689.002223ms ago: executing program 0 (id=67):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
open_by_handle_at(r3, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x0, 0x2, 0xe9, 0x8, 0x5, 0xfffffffe}}, 0x40)
r4 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x3554000)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, 0x0}, 0x10c)
fadvise64(r4, 0x85f5, 0x4000000005, 0x4)

370.604005ms ago: executing program 2 (id=68):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1})
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x3ff, 0x2, 0x2, 0x7, 0x9, 0x1, 0x5, 0x9])
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001300)={&(0x7f0000000300)=[0xd05f081, 0x0, 0x5, 0x200, 0x9, 0xfffffffd, 0x1, 0xa88, 0x4, 0x0, 0xb4, 0x4, 0x8fb, 0x2, 0x0, 0x10000, 0x9, 0x9, 0x1e2, 0x9, 0x3, 0x3, 0xae2, 0xb253, 0x9, 0x0, 0x5, 0x101, 0x4, 0x800, 0x6, 0x2aa, 0x2, 0x3, 0x2, 0x5, 0x1, 0x6, 0x3, 0x5, 0x80, 0x4, 0x4, 0x9, 0x2, 0x10, 0x4, 0x5, 0x6, 0x6d800, 0x0, 0x401, 0x7, 0x8, 0x9, 0x9, 0x7, 0x2, 0x3ff, 0x6, 0x7, 0x1ff, 0x3ff, 0x686e, 0x8, 0x2, 0x9, 0x9, 0xfffffffb, 0x2, 0xc, 0x5, 0x0, 0x1, 0xcd0, 0x7ff, 0x2, 0x1, 0x0, 0x2, 0xfffffe00, 0xff, 0x8001, 0x2, 0x4, 0xe, 0x8, 0x9, 0x10000, 0x8c, 0xbd2d, 0xfffffff7, 0x6, 0x1, 0xffffffff, 0x80000001, 0x9, 0x660, 0x2, 0x2, 0x8, 0x40, 0x9, 0x0, 0x1, 0x1, 0x5, 0x3, 0x5, 0x7, 0x200, 0x1, 0x0, 0x7ff, 0x6, 0x7, 0x6, 0x2, 0x101, 0x5, 0x1, 0xee, 0xffffffba, 0x800, 0x10000, 0x6, 0x200, 0xd, 0x2, 0x8000, 0x3, 0x100, 0x9, 0x7, 0x4, 0x9e0, 0x5, 0x5, 0xe, 0x1, 0xf, 0x6, 0x4, 0xf9, 0x1, 0x6, 0x2, 0x9, 0x8, 0x6, 0x34, 0x5, 0x2, 0x5, 0xac, 0x3, 0x9, 0x4457, 0xffffffff, 0x7, 0x3, 0x1, 0x80, 0xe184, 0x9, 0x1400, 0x8, 0xf5, 0x75fe, 0x72, 0x9, 0x8, 0x0, 0x8, 0x1, 0x0, 0x1, 0x5, 0x7, 0x3, 0x5a01ffb1, 0x3, 0x7, 0x7ff, 0x1, 0xd, 0x6, 0x200, 0x8, 0x2, 0xba, 0x3, 0x5, 0x8, 0x1, 0x2bc, 0x56, 0x4, 0x1, 0xe, 0x2, 0x174, 0x7, 0x6, 0x7, 0x0, 0x4, 0x4, 0x2, 0x28c3, 0x2, 0x3, 0x9, 0x9, 0x8, 0x2, 0x3, 0x4, 0x4, 0x2ba5, 0x591, 0x5, 0xe5, 0xa6d8, 0x3, 0x7fffffff, 0x4, 0x9236, 0x10, 0x9, 0x4000000, 0x0, 0xfffffffd, 0x5, 0x5, 0x7000000, 0x0, 0x4, 0x67, 0x6, 0x400, 0x0, 0x10000, 0x4, 0x1, 0x800, 0x6, 0x3de40000, 0x6e80, 0x61, 0x1, 0x7, 0x400, 0x7fffffff, 0x4, 0x7, 0x6f, 0x100, 0xb68, 0xd, 0x7, 0x100, 0x4, 0x24, 0x4, 0x8000, 0x6, 0x3, 0xb23, 0x0, 0x401, 0xf52, 0x5, 0x2, 0x3ff, 0xff, 0xb2, 0x3, 0xfffffff9, 0x7, 0x5bd0, 0xfffffffd, 0x7f4, 0x488, 0x6, 0x3, 0x1, 0x3, 0x81, 0x32, 0x8, 0x9, 0xffff, 0x7, 0x4, 0xe, 0x80000000, 0x264, 0x7, 0x5, 0x0, 0xffffff7f, 0x2, 0x40, 0xf8000000, 0xff, 0xb406, 0x1, 0x1, 0x71d2, 0x1, 0x3, 0x6, 0x101, 0x1, 0x6, 0x7, 0x5, 0xfffffff8, 0xffff, 0x3, 0x5, 0xffffff30, 0x4, 0x101, 0x6, 0x8, 0xfff, 0xca1, 0x4, 0x6c, 0xfffffff9, 0x0, 0xc, 0xd2f, 0xbd, 0x1, 0x26, 0x1, 0xffffffff, 0x1cdeab97, 0x7, 0xab, 0x1, 0x200, 0x8, 0x9, 0x4, 0x5, 0x8, 0x6, 0x8, 0x6, 0x2, 0xb, 0x3e, 0x18d27986, 0x7, 0x80, 0x80, 0x8, 0x9, 0x5, 0x1, 0x0, 0x7, 0xf, 0x2, 0x809, 0x1, 0xa0000000, 0x1, 0x0, 0x4, 0x5, 0x7, 0x5, 0x101, 0x4, 0x5, 0x5, 0x1e, 0x6, 0x2, 0x9, 0xfffffffc, 0x401, 0x7fff, 0x9, 0x1, 0x8, 0x80000000, 0xc000000, 0x8, 0x4, 0x5, 0x0, 0x1, 0xc, 0x7ff, 0x6, 0x363e, 0xca, 0x8, 0x3, 0x5, 0x7, 0x5328, 0x3, 0x2, 0x3, 0x1, 0x8dd6, 0x7f, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x9, 0x10001, 0xffffffff, 0x7, 0x0, 0x5, 0x1, 0x2, 0x5, 0x354, 0x40, 0x7, 0x2, 0x4, 0x3, 0x1, 0x4, 0x9, 0x6, 0xaa, 0x7439, 0x8ec, 0x7, 0x200, 0x3, 0xb, 0x9, 0x3, 0xee, 0x0, 0x7, 0x6, 0xf0b, 0x3, 0x400, 0x8, 0x3, 0x7, 0x7, 0x5d9cc6e, 0x7ff, 0x4, 0x0, 0xd31, 0x8, 0x5f30, 0x5, 0x885, 0x6, 0x5, 0x0, 0x9, 0xffffffff, 0x0, 0x5, 0x3, 0xa, 0x7, 0x800, 0x80f, 0x2, 0x9, 0x7fff, 0x8000, 0x5, 0x4, 0xe00, 0x8fac, 0x3, 0x1, 0x1a2, 0x4, 0x6, 0x3, 0x1, 0x80000000, 0x6, 0x3, 0x7, 0x3e6, 0x8, 0x0, 0x2, 0x9, 0x0, 0x81, 0xc, 0x1, 0x6, 0x8, 0xd08c, 0x6, 0x457d, 0x0, 0x0, 0x22cc, 0x7fffffff, 0x80, 0x1000, 0xa01, 0x7ff, 0x5, 0x10, 0x5, 0x4, 0xb71, 0x10, 0x0, 0x3, 0xa, 0x2, 0x7ba8, 0x40, 0xfffffffc, 0x2, 0x0, 0x3, 0x9, 0x1ff, 0x3, 0x7, 0x1, 0x3, 0x3, 0xc28d, 0x0, 0x0, 0x9, 0x101, 0x10001, 0xf9, 0x3, 0x1ff, 0x0, 0x1, 0xfffffffb, 0x3, 0xffff, 0x1, 0xfffffc00, 0xfffffffa, 0x4, 0xe, 0x0, 0xfffffffd, 0x6, 0x7, 0x2, 0x917, 0x6, 0x2, 0x1, 0x7, 0x901, 0x150, 0x8, 0x8, 0xd, 0xfff, 0xfd, 0xe0e, 0x0, 0xe, 0x613d, 0x2f4, 0x1, 0x9, 0x7b5, 0x1, 0x2, 0x4, 0xbec5d919, 0x6, 0x97e, 0x6, 0x8, 0x1000, 0x4c27, 0x3, 0x8, 0x2, 0x80, 0x7fffffff, 0xe, 0x4, 0x2, 0x5, 0x36c1, 0x6, 0xe, 0x800, 0xf322, 0x6, 0xc, 0xfff, 0x5, 0x8, 0x4, 0xc8c, 0x10, 0x1, 0x3, 0x3, 0x7, 0x1, 0x6, 0x9, 0x8, 0x3, 0xf, 0x1, 0x6, 0xffffffff, 0x9, 0xfffffffb, 0x0, 0x8, 0x6, 0xfffffc00, 0x0, 0xff, 0x7, 0x0, 0x10000, 0x6, 0x0, 0x2, 0x2, 0x4, 0x556b, 0x2, 0x6, 0xfffffffb, 0x800, 0x3ff, 0xfffffffb, 0xffffffc0, 0x25f, 0x1, 0x2, 0x6, 0x27a27e45, 0x2, 0x40, 0xfffffffd, 0x4, 0x1, 0x61, 0x5, 0x0, 0x2, 0x5, 0x6, 0xa83, 0xf, 0x603aba27, 0x200, 0x0, 0x7ff, 0x4, 0x3, 0x7, 0x9, 0x4, 0x2400, 0x7, 0x2, 0x6, 0x0, 0x8, 0xff, 0xfffff0c1, 0xfffffffc, 0x10001, 0x9, 0x0, 0x5, 0x4, 0x3, 0x22, 0xceb3, 0x4, 0x10, 0x8, 0x9, 0x4, 0x5, 0xfff, 0x2, 0x85a, 0x6, 0x5ae05880, 0x5, 0x9, 0x9, 0x3, 0x6, 0x4, 0x0, 0x7, 0x9, 0x81, 0xbc06, 0x2, 0x0, 0x3ff, 0xfc1d, 0x9, 0x7, 0x1, 0x101, 0x0, 0x5, 0x4, 0x400, 0xffff4aeb, 0x3, 0x9, 0x6, 0x1, 0xe8a, 0x0, 0x400, 0x40, 0x101, 0x8001, 0x9, 0xc566, 0x4, 0x6, 0x8001, 0x6, 0x10, 0x8, 0x990, 0xb, 0x8, 0x4, 0xffffff0e, 0x0, 0x9, 0x6, 0x10000, 0xfffffff7, 0x1, 0x9, 0x0, 0x2, 0x101, 0x3, 0xef5, 0x5d0, 0x3, 0x8, 0x19, 0x2, 0x0, 0x4, 0x7dd, 0x4, 0x4, 0x800, 0x1, 0x0, 0x1ff, 0xef2, 0x8, 0x6, 0x2, 0x6, 0xffffffff, 0xaf6, 0xf, 0x137, 0x40, 0x9, 0x8, 0x6, 0xd, 0xbe, 0x5, 0x66aa, 0x8, 0x7, 0xfffffff7, 0x5, 0x3, 0x1, 0x5, 0x9, 0x10, 0x2, 0xfffffff8, 0x1, 0x5, 0x5, 0x8, 0x7, 0x5, 0x7f, 0xfffffffe, 0x7, 0x4, 0x8, 0x7, 0x5, 0x800, 0xffffffff, 0x5, 0x200, 0x47, 0x2, 0x6, 0x7, 0x0, 0x2115, 0x8, 0x401, 0x1, 0x9, 0xffffffff, 0x27, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x5, 0x4, 0x6, 0x1ff, 0x9, 0x16, 0x5, 0x1, 0x2, 0xa819, 0x3, 0x1, 0x5, 0x9, 0x3, 0x0, 0x2, 0xfffffff7, 0x6, 0x5fc, 0x5, 0xe37d, 0x30, 0x3, 0x8, 0x2, 0x0, 0x7, 0x7, 0xfa0, 0x8, 0xfffffffb, 0x400, 0x6723, 0x5, 0x5, 0x6, 0x1, 0x2, 0x1, 0xb19, 0x4, 0x400, 0x4, 0x4, 0xfffffff9, 0xe8000000, 0xffff, 0x7, 0x3ff, 0x400, 0x9, 0xfffffffb, 0x4, 0x6, 0x6, 0x0, 0x5, 0xe4fc, 0x401, 0xfff, 0x2, 0x8001, 0x9e8d, 0x6, 0x5, 0x5, 0xfffffffd, 0xfffffff7, 0x1, 0xfffffff9, 0x6, 0x5, 0x0, 0xff, 0x1, 0x6, 0x68a, 0x320b, 0xfa0000, 0x336, 0x1, 0x6, 0x5, 0x8, 0x7fffffff, 0x895, 0x10000, 0x8, 0x4, 0x2, 0x4, 0x1, 0x0, 0xb, 0x8, 0x672e, 0x3, 0x10, 0x29b, 0x100000, 0x893, 0x1, 0xd, 0x7, 0x23b, 0x800, 0x7, 0x4, 0x80000001, 0xffffffff, 0x7ce, 0x9, 0x5, 0x100, 0x7, 0x81, 0x1, 0x6, 0x7, 0x9, 0xf14e, 0xfffffff9, 0x6, 0xfff, 0x577, 0x3, 0xfffff000, 0x1, 0x2, 0x7357, 0x2, 0x80000001, 0x5, 0x10001, 0x10001, 0x5, 0x505f, 0x1, 0x5, 0xb, 0x4, 0x6, 0x800, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4, 0x8, 0x4, 0x9, 0x1, 0x9, 0x1, 0x100, 0x1ff, 0x10000, 0xf9, 0x8, 0x7fffffff, 0x6, 0x4, 0x6, 0x40, 0x2, 0x0, 0x9, 0x8000, 0x4, 0xd, 0xa5dd, 0x5, 0x15], 0x4, 0x400, 0x40})

309.230606ms ago: executing program 2 (id=69):
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000000c0)=0x8, 0x1, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7d, 0x100}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94)

303.643239ms ago: executing program 2 (id=70):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)
ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x400000, 0x2, 0x8})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0x5, 0x0, 0x200, 0x40, @mcast2, @private0, 0x20, 0x10, 0xd, 0xfffff188}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0x4, 0xbc, 0x2080, r2, 0x1, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0xe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r4}, 0x38)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

169.208839ms ago: executing program 2 (id=71):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x4, 0xc, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x8182)
r2 = dup3(r1, r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x40e7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x0, 0x23})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x341c0, 0x0)
dup3(r1, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) (async)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x4, 0xc, "0062ba7d82000000000000000000f7fffeff00"}) (async)
syz_open_pts(r0, 0x8182) (async)
dup3(r1, r0, 0x0) (async)
ioctl$TCFLSH(r2, 0x540b, 0x2) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
io_uring_setup(0x40e7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x0, 0x23}) (async)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x341c0, 0x0) (async)
dup3(r1, r4, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) (async)

0s ago: executing program 2 (id=72):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528addb243700", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf253e0000000800", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4", 0x27, 0x840, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774", 0xc}], 0x3, &(0x7f00000014c0)}}], 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef000000000000ef8c975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8143ef2f4b93766b9a21501f94c1568b13756b66f74f46b0801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000002c0)=[@op={0x18}, @op={0x18}], 0x30, 0x4}], 0x1, 0x20008810)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x9)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f00000000c0))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r10, 0xc01864c2, &(0x7f0000000040))
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f0000000100)={&(0x7f0000000080), 0x3ffffffffffffd48})

kernel console output (not intermixed with test programs):

[   53.146370][   T40] audit: type=1400 audit(1777222787.177:61): avc:  denied  { siginh } for  pid=5713 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:58339' (ED25519) to the list of known hosts.
[   54.103046][   T40] audit: type=1400 audit(1777222788.167:62): avc:  denied  { name_bind } for  pid=5720 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   54.138734][   T40] audit: type=1400 audit(1777222788.207:63): avc:  denied  { execute } for  pid=5721 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   54.146935][   T40] audit: type=1400 audit(1777222788.217:64): avc:  denied  { execute_no_trans } for  pid=5721 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   56.512825][   T40] audit: type=1400 audit(1777222790.577:65): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   56.520578][   T40] audit: type=1400 audit(1777222790.587:66): avc:  denied  { mount } for  pid=5721 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.522239][ T5721] cgroup: Unknown subsys name 'net'
[   56.689164][ T5721] cgroup: Unknown subsys name 'cpuset'
[   56.696431][ T5721] cgroup: Unknown subsys name 'rlimit'
[   56.937911][ T5726] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   57.693169][ T5721] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.986949][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   60.986965][   T40] audit: type=1400 audit(1777222795.047:82): avc:  denied  { execmem } for  pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   61.129695][   T40] audit: type=1400 audit(1777222795.197:83): avc:  denied  { create } for  pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.144350][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.146814][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.148157][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.151129][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.153827][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.155463][   T40] audit: type=1400 audit(1777222795.197:84): avc:  denied  { read write } for  pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.156004][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.156592][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.156830][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.161087][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.168242][   T40] audit: type=1400 audit(1777222795.197:85): avc:  denied  { open } for  pid=5735 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   61.168284][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.171762][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.171950][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.172598][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.173359][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.175311][   T40] audit: type=1400 audit(1777222795.207:86): avc:  denied  { ioctl } for  pid=5734 comm="syz-executor" path="socket:[5693]" dev="sockfs" ino=5693 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.175352][   T40] audit: type=1400 audit(1777222795.207:87): avc:  denied  { ioctl } for  pid=5735 comm="syz-executor" path="socket:[7383]" dev="sockfs" ino=7383 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.175417][   T40] audit: type=1400 audit(1777222795.227:88): avc:  denied  { read } for  pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   61.175455][   T40] audit: type=1400 audit(1777222795.227:89): avc:  denied  { open } for  pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   61.175497][   T40] audit: type=1400 audit(1777222795.227:90): avc:  denied  { mounton } for  pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   61.175533][   T40] audit: type=1400 audit(1777222795.237:91): avc:  denied  { module_request } for  pid=5735 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   61.196199][   T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.199536][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.204538][   T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.258409][   T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.261357][   T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.264083][   T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.795858][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.799891][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.803233][ T5734] bridge_slave_0: entered allmulticast mode
[   61.807513][ T5734] bridge_slave_0: entered promiscuous mode
[   61.831850][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.835015][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.838156][ T5734] bridge_slave_1: entered allmulticast mode
[   61.842069][ T5734] bridge_slave_1: entered promiscuous mode
[   61.857634][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.860037][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.862335][ T5742] bridge_slave_0: entered allmulticast mode
[   61.867918][ T5742] bridge_slave_0: entered promiscuous mode
[   61.871110][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.873428][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.876275][ T5742] bridge_slave_1: entered allmulticast mode
[   61.880012][ T5742] bridge_slave_1: entered promiscuous mode
[   61.925787][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.954005][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.960962][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.984091][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.029153][ T5742] team0: Port device team_slave_0 added
[   62.042688][ T5734] team0: Port device team_slave_0 added
[   62.045849][ T5742] team0: Port device team_slave_1 added
[   62.065025][ T5734] team0: Port device team_slave_1 added
[   62.097930][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.100367][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.109250][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.131871][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.134589][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.145617][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.157769][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.160690][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.163704][ T5735] bridge_slave_0: entered allmulticast mode
[   62.166710][ T5735] bridge_slave_0: entered promiscuous mode
[   62.169972][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.172392][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.174953][ T5735] bridge_slave_1: entered allmulticast mode
[   62.178402][ T5735] bridge_slave_1: entered promiscuous mode
[   62.181640][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.183892][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.192140][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.198514][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.201522][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.212217][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.263166][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.266431][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.269445][ T5747] bridge_slave_0: entered allmulticast mode
[   62.273046][ T5747] bridge_slave_0: entered promiscuous mode
[   62.278208][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.281915][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.284271][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.286630][ T5747] bridge_slave_1: entered allmulticast mode
[   62.289557][ T5747] bridge_slave_1: entered promiscuous mode
[   62.311421][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.335280][ T5734] hsr_slave_0: entered promiscuous mode
[   62.337962][ T5734] hsr_slave_1: entered promiscuous mode
[   62.352344][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.360566][ T5742] hsr_slave_0: entered promiscuous mode
[   62.363480][ T5742] hsr_slave_1: entered promiscuous mode
[   62.366085][ T5742] debugfs: 'hsr0' already exists in 'hsr'
[   62.368414][ T5742] Cannot create hsr debugfs directory
[   62.383567][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.409156][ T5735] team0: Port device team_slave_0 added
[   62.425408][ T5735] team0: Port device team_slave_1 added
[   62.443645][ T5747] team0: Port device team_slave_0 added
[   62.461194][ T5747] team0: Port device team_slave_1 added
[   62.469691][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.472179][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.480538][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.489664][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.491911][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.500255][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.540119][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.543079][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.553971][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.562605][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.565657][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.576288][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.648232][ T5735] hsr_slave_0: entered promiscuous mode
[   62.650944][ T5735] hsr_slave_1: entered promiscuous mode
[   62.653515][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[   62.655995][ T5735] Cannot create hsr debugfs directory
[   62.738434][ T5747] hsr_slave_0: entered promiscuous mode
[   62.741826][ T5747] hsr_slave_1: entered promiscuous mode
[   62.744896][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[   62.747377][ T5747] Cannot create hsr debugfs directory
[   62.885901][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.891724][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.910752][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.915250][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.918021][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.922788][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.928505][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.933408][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.009337][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.013562][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.018949][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.022515][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.025767][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.032367][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.036232][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.040653][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.103575][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.109250][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.112517][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.117467][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.121687][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.127068][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.129817][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.134350][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.178193][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.195532][   T62] Bluetooth: hci1: command tx timeout
[   63.195538][ T5738] Bluetooth: hci0: command tx timeout
[   63.238461][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[   63.241626][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.248165][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.258408][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.264731][   T62] Bluetooth: hci2: command tx timeout
[   63.264842][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.269787][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.273639][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.276631][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.280532][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.294244][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.298230][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.318181][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.321011][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.344531][   T62] Bluetooth: hci3: command tx timeout
[   63.358053][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.393717][ T5742] 8021q: adding VLAN 0 to HW filter on device team0
[   63.410332][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.413458][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.428087][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.430466][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.437512][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.470303][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   63.487841][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.490205][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.500126][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.521949][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.525129][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.539647][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[   63.557041][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.559427][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.574403][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.577782][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.719012][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.749042][ T5734] veth0_vlan: entered promiscuous mode
[   63.759186][ T5734] veth1_vlan: entered promiscuous mode
[   63.774029][ T5734] veth0_macvtap: entered promiscuous mode
[   63.780197][ T5734] veth1_macvtap: entered promiscuous mode
[   63.793607][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.800996][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.807139][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.821638][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.826151][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.831921][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.835706][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.843888][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.893118][ T5742] veth0_vlan: entered promiscuous mode
[   63.917549][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.920754][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.936093][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.948496][ T5742] veth1_vlan: entered promiscuous mode
[   63.962282][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.967752][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.969914][ T5735] veth0_vlan: entered promiscuous mode
[   63.985745][ T5735] veth1_vlan: entered promiscuous mode
[   64.009772][ T5747] veth0_vlan: entered promiscuous mode
[   64.010980][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.019372][ T5742] veth0_macvtap: entered promiscuous mode
[   64.027655][ T5742] veth1_macvtap: entered promiscuous mode
[   64.031819][ T5747] veth1_vlan: entered promiscuous mode
[   64.068051][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.071996][ T5735] veth0_macvtap: entered promiscuous mode
[   64.078495][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.087221][ T5735] veth1_macvtap: entered promiscuous mode
[   64.099564][ T1267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.103780][ T1267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.114025][ T1267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.116722][ T5883] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   64.128904][ T1267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.140008][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.143655][ T5747] veth0_macvtap: entered promiscuous mode
[   64.157401][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.167995][ T5747] veth1_macvtap: entered promiscuous mode
[   64.175908][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.191953][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.199400][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.216549][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.217764][ T5886] Zero length message leads to an empty skb
[   64.232610][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.242022][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.246297][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.270670][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.299022][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.313109][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.318584][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.328854][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.333437][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.333490][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.379503][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.382970][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.392083][  T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.399444][  T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.454623][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.459048][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.475765][  T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.482752][  T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.610479][ T5907] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   64.625648][ T5908] random: crng reseeded on system resumption
[   64.637817][ T5908] Restarting kernel threads ...
[   64.639987][ T5908] Done restarting kernel threads.
[   64.641827][ T5908] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   64.746091][ T5924] ALSA: seq fatal error: cannot create timer (-19)
[   64.761710][ T5924] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   65.249893][ T5950] netlink: 'syz.0.17': attribute type 4 has an invalid length.
[   65.275239][   T62] Bluetooth: hci0: command tx timeout
[   65.275388][ T5738] Bluetooth: hci1: command tx timeout
[   65.329125][ T5951] Process accounting resumed
[   65.345066][ T5738] Bluetooth: hci2: command tx timeout
[   65.362705][ T5955] team0: Device wg1 is up. Set it down before adding it as a team port
[   65.424632][ T5738] Bluetooth: hci3: command tx timeout
[   65.451805][ T5940] syz.3.14 (5940): drop_caches: 2
[   65.527975][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   65.530952][ T5968] netlink: 'syz.2.20': attribute type 30 has an invalid length.
[   65.534007][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   65.547783][ T5967] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.609177][ T5974] process 'syz.1.25' launched './file0' with NULL argv: empty string added
[   65.649601][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'.
[   65.845405][ T5992] netlink: 'syz.2.30': attribute type 14 has an invalid length.
[   65.848984][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   65.868468][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.868489][ T5992] netlink: 'syz.2.30': attribute type 14 has an invalid length.
[   65.874093][  T163] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.875507][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   65.883166][  T163] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.889246][  T163] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.010973][   T40] kauditd_printk_skb: 99 callbacks suppressed
[   66.010990][   T40] audit: type=1400 audit(1777222800.077:191): avc:  denied  { create } for  pid=6007 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   66.013920][ T6008] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   66.022183][   T40] audit: type=1400 audit(1777222800.077:192): avc:  denied  { getopt } for  pid=6007 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   66.028437][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   66.038221][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   66.049667][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'.
[   66.083873][   T40] audit: type=1400 audit(1777222800.147:193): avc:  denied  { setopt } for  pid=6012 comm="syz.2.39" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   66.092500][   T40] audit: type=1400 audit(1777222800.157:194): avc:  denied  { unlink } for  pid=6012 comm="syz.2.39" name="#1" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   66.102482][   T40] audit: type=1400 audit(1777222800.167:195): avc:  denied  { create } for  pid=6012 comm="syz.2.39" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   66.114885][   T40] audit: type=1400 audit(1777222800.167:196): avc:  denied  { link } for  pid=6012 comm="syz.2.39" name="#3" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   66.122366][   T40] audit: type=1400 audit(1777222800.167:197): avc:  denied  { rename } for  pid=6012 comm="syz.2.39" name="#4" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   66.130855][   T40] audit: type=1400 audit(1777222800.197:198): avc:  denied  { create } for  pid=6010 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   66.138149][   T40] audit: type=1400 audit(1777222800.197:199): avc:  denied  { create } for  pid=6010 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.144477][   T40] audit: type=1400 audit(1777222800.197:200): avc:  denied  { ioctl } for  pid=6010 comm="syz.3.38" path="socket:[10431]" dev="sockfs" ino=10431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.249530][ T6030] =======================================================
[   66.249530][ T6030] WARNING: The mand mount option has been deprecated and
[   66.249530][ T6030]          and is ignored by this kernel. Remove the mand
[   66.249530][ T6030]          option from the mount to silence this warning.
[   66.249530][ T6030] =======================================================
[   66.555078][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   66.694499][ T5894] usb 7-1: device descriptor read/64, error -71
[   66.934545][ T5894] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   67.085262][ T5894] usb 7-1: device descriptor read/64, error -71
[   67.093824][ T6049] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   67.130828][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.49'.
[   67.135417][ T6051] netlink: 328 bytes leftover after parsing attributes in process `syz.3.49'.
[   67.204767][ T5894] usb usb7-port1: attempt power cycle
[   67.333112][ T6059] trusted_key: encrypted_key: insufficient parameters specified
[   67.346089][ T5738] Bluetooth: hci1: command tx timeout
[   67.346100][   T62] Bluetooth: hci0: command tx timeout
[   67.439176][ T6068] tipc: Started in network mode
[   67.441695][ T6068] tipc: Node identity 84e, cluster identity 4711
[   67.443827][ T6068] tipc: Node number set to 2126
[   67.451441][ T6068] openvswitch: netlink: Flow key attr not present in new flow.
[   67.506604][ T5738] Bluetooth: hci3: command tx timeout
[   67.554540][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   67.587070][ T5894] usb 7-1: device descriptor read/8, error -71
[   67.824517][ T5894] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   67.856024][ T5894] usb 7-1: device descriptor read/8, error -71
[   67.975890][ T5894] usb usb7-port1: unable to enumerate USB device
[   69.339029][ T6081] hub 8-0:1.0: USB hub found
[   69.340527][ T6081] hub 8-0:1.0: 1 port detected
[   69.424556][ T5738] Bluetooth: hci1: command tx timeout
[   69.434557][ T5738] Bluetooth: hci0: command tx timeout
[   69.584651][ T5738] Bluetooth: hci3: command tx timeout
[   69.986199][ T5738] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   69.986263][ T5738] Bluetooth: hci2: Injecting HCI hardware error event
[   69.987469][   T62] Bluetooth: hci2: hardware error 0x00
[   70.532945][ T6072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.540198][ T6090] netlink: 'syz.2.60': attribute type 2 has an invalid length.
[   70.552576][ T6090] netlink: 'syz.2.60': attribute type 2 has an invalid length.
[   70.582317][ T6095] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[   70.586069][ T6095] __nla_validate_parse: 3 callbacks suppressed
[   70.586078][ T6095] netlink: 96 bytes leftover after parsing attributes in process `syz.0.61'.
[   70.591304][ T6095] netlink: 658 bytes leftover after parsing attributes in process `syz.0.61'.
[   70.594085][ T6095] netlink: 1 bytes leftover after parsing attributes in process `syz.0.61'.
[   70.597621][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'.
[   70.610721][ T6097] netlink: 'syz.3.62': attribute type 1 has an invalid length.
[   70.633754][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.651686][ T6097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.62'.
[   70.682418][ T6100] ieee802154 phy0 wpan0: encryption failed: -22
[   71.142337][   T40] kauditd_printk_skb: 58 callbacks suppressed
[   71.142352][   T40] audit: type=1400 audit(1777222805.207:259): avc:  denied  { unmount } for  pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   71.178205][   T40] audit: type=1400 audit(1777222805.247:260): avc:  denied  { read } for  pid=6119 comm="syz.2.68" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   71.187971][   T40] audit: type=1400 audit(1777222805.247:261): avc:  denied  { open } for  pid=6119 comm="syz.2.68" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   71.197722][   T40] audit: type=1400 audit(1777222805.247:262): avc:  denied  { write } for  pid=6119 comm="syz.2.68" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   71.207044][   T40] audit: type=1400 audit(1777222805.247:263): avc:  denied  { ioctl } for  pid=6119 comm="syz.2.68" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   71.325505][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   71.495516][   T40] audit: type=1400 audit(1777222805.567:264): avc:  denied  { create } for  pid=6128 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   71.502389][   T40] audit: type=1400 audit(1777222805.567:265): avc:  denied  { ioctl } for  pid=6128 comm="syz.2.71" path="socket:[9931]" dev="sockfs" ino=9931 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   71.540430][   T40] audit: type=1400 audit(1777222805.607:266): avc:  denied  { ioctl } for  pid=6133 comm="syz.2.72" path="socket:[9025]" dev="sockfs" ino=9025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   71.549637][   T40] audit: type=1400 audit(1777222805.617:267): avc:  denied  { create } for  pid=6133 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   71.563426][   T40] audit: type=1400 audit(1777222805.627:268): avc:  denied  { create } for  pid=6133 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   71.600070][ T6134] netlink: 'syz.2.72': attribute type 21 has an invalid length.
[   71.620739][ T6134] ------------[ cut here ]------------
[   71.623181][ T6134] 1
[   71.623191][ T6134] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x23da/0x2bc0, CPU#3: syz.2.72/6134
[   71.628947][ T6134] Modules linked in:
[   71.630477][ T6134] CPU: 3 UID: 0 PID: 6134 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) 
[   71.633910][ T6134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.637432][ T6134] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.639612][ T6134] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 e5 35 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[   71.646477][ T6134] RSP: 0018:ffffc90005bff7a0 EFLAGS: 00010246
[   71.648469][ T6134] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   71.651005][ T6134] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0
[   71.653553][ T6134] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009
[   71.656341][ T6134] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0
[   71.658864][ T6134] R13: 1ffff92000b7ff43 R14: 0000000000000016 R15: 1ffff92000b7ff0d
[   71.661423][ T6134] FS:  00007fcdf6bf66c0(0000) GS:ffff8880d6679000(0000) knlGS:0000000000000000
[   71.665154][ T6134] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.667416][ T6134] CR2: 000000110c459f1f CR3: 000000003d38c000 CR4: 0000000000352ef0
[   71.669970][ T6134] Call Trace:
[   71.671084][ T6134]  <TASK>
[   71.672129][ T6134]  ? bpf_ksym_find+0x128/0x1c0
[   71.674179][ T6134]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   71.676476][ T6134]  ? is_bpf_text_address+0x94/0x1a0
[   71.678417][ T6134]  ? kernel_text_address+0x8d/0x100
[   71.680633][ T6134]  ? __pfx_widen_string+0x10/0x10
[   71.682815][ T6134]  ? __kernel_text_address+0xd/0x30
[   71.685162][ T6134]  ? unwind_get_return_address+0x59/0xa0
[   71.687581][ T6134]  ? arch_stack_walk+0xa6/0xf0
[   71.689641][ T6134]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   71.692357][ T6134]  ? tomoyo_path_number_perm+0x46d/0x580
[   71.694943][ T6134]  ? stack_trace_save+0x8e/0xc0
[   71.697076][ T6134]  ? stack_depot_save_flags+0x27/0x9d0
[   71.699405][ T6134]  ? __lock_acquire+0x4a5/0x2630
[   71.701483][ T6134]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   71.703978][ T6134]  ? policy_nodemask+0xed/0x4f0
[   71.705827][ T6134]  alloc_pages_mpol+0x1fb/0x540
[   71.707589][ T6134]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   71.709836][ T6134]  ? find_held_lock+0x2b/0x80
[   71.711958][ T6134]  ? avc_has_extended_perms+0x33a/0x1080
[   71.714530][ T6134]  ? avc_has_extended_perms+0x33a/0x1080
[   71.716967][ T6134]  ? drm_syncobj_array_find+0x34/0x3b0
[   71.719382][ T6134]  ___kmalloc_large_node+0xe5/0x120
[   71.721547][ T6134]  __kmalloc_large_node_noprof+0x1c/0x70
[   71.723831][ T6134]  __kmalloc_noprof+0x5be/0x850
[   71.726020][ T6134]  drm_syncobj_array_find+0x34/0x3b0
[   71.728270][ T6134]  drm_syncobj_reset_ioctl+0x20b/0x370
[   71.730551][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.733076][ T6134]  ? drm_dev_exit+0x41/0x60
[   71.735520][ T6134]  ? drm_dev_exit+0x41/0x60
[   71.737496][ T6134]  drm_ioctl_kernel+0x1f3/0x3e0
[   71.739580][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.742044][ T6134]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   71.744267][ T6134]  drm_ioctl+0x5e6/0xc60
[   71.746440][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.749049][ T6134]  ? __pfx_drm_ioctl+0x10/0x10
[   71.751170][ T6134]  ? selinux_file_ioctl+0x13b/0x290
[   71.753438][ T6134]  ? selinux_file_ioctl+0xb6/0x290
[   71.755719][ T6134]  ? __pfx_drm_ioctl+0x10/0x10
[   71.757749][ T6134]  __x64_sys_ioctl+0x18e/0x210
[   71.759848][ T6134]  do_syscall_64+0x10b/0xf80
[   71.761758][ T6134]  ? clear_bhb_loop+0x40/0x90
[   71.763878][ T6134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.766513][ T6134] RIP: 0033:0x7fcdf899cdd9
[   71.768423][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.776396][ T6134] RSP: 002b:00007fcdf6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.779080][ T6134] RAX: ffffffffffffffda RBX: 00007fcdf8c15fa0 RCX: 00007fcdf899cdd9
[   71.782304][ T6134] RDX: 0000200000000100 RSI: 00000000c01064c4 RDI: 000000000000000b
[   71.785658][ T6134] RBP: 00007fcdf8a32d69 R08: 0000000000000000 R09: 0000000000000000
[   71.789126][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.792450][ T6134] R13: 00007fcdf8c16038 R14: 00007fcdf8c15fa0 R15: 00007ffe3bccee78
[   71.795901][ T6134]  </TASK>
[   71.797259][ T6134] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   71.800345][ T6134] CPU: 3 UID: 0 PID: 6134 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) 
[   71.804341][ T6134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   71.808591][ T6134] Call Trace:
[   71.810042][ T6134]  <TASK>
[   71.811330][ T6134]  dump_stack_lvl+0x100/0x190
[   71.813360][ T6134]  vpanic+0x552/0x970
[   71.815105][ T6134]  ? __pfx_vpanic+0x10/0x10
[   71.816938][ T6134]  panic+0xd1/0xe0
[   71.818542][ T6134]  ? __pfx_panic+0x10/0x10
[   71.820557][ T6134]  check_panic_on_warn.cold+0x19/0x34
[   71.822940][ T6134]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.825542][ T6134]  __warn.cold+0x191/0x328
[   71.827521][ T6134]  __report_bug+0x296/0x3d0
[   71.829468][ T6134]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.832099][ T6134]  ? __pfx___report_bug+0x10/0x10
[   71.834214][ T6134]  ? __lock_acquire+0x4a5/0x2630
[   71.836344][ T6134]  ? __lock_acquire+0x4a5/0x2630
[   71.838472][ T6134]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.841126][ T6134]  report_bug+0xb2/0x220
[   71.842945][ T6134]  ? __alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.845650][ T6134]  handle_bug+0x16a/0x2a0
[   71.847569][ T6134]  exc_invalid_op+0x17/0x50
[   71.849557][ T6134]  asm_exc_invalid_op+0x1a/0x20
[   71.851647][ T6134] RIP: 0010:__alloc_frozen_pages_noprof+0x23da/0x2bc0
[   71.854328][ T6134] Code: 00 45 31 c9 49 83 bc 24 78 05 00 00 00 4c 89 4c 24 50 0f 85 64 f8 ff ff c6 44 24 10 00 e9 f2 ea ff ff c6 05 e5 35 57 0e 01 90 <0f> 0b 90 e9 79 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41
[   71.862298][ T6134] RSP: 0018:ffffc90005bff7a0 EFLAGS: 00010246
[   71.864911][ T6134] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   71.868324][ T6134] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0
[   71.871706][ T6134] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009
[   71.875031][ T6134] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0
[   71.878355][ T6134] R13: 1ffff92000b7ff43 R14: 0000000000000016 R15: 1ffff92000b7ff0d
[   71.881722][ T6134]  ? bpf_ksym_find+0x128/0x1c0
[   71.883819][ T6134]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   71.886503][ T6134]  ? is_bpf_text_address+0x94/0x1a0
[   71.888711][ T6134]  ? kernel_text_address+0x8d/0x100
[   71.890928][ T6134]  ? __pfx_widen_string+0x10/0x10
[   71.893127][ T6134]  ? __kernel_text_address+0xd/0x30
[   71.895365][ T6134]  ? unwind_get_return_address+0x59/0xa0
[   71.897698][ T6134]  ? arch_stack_walk+0xa6/0xf0
[   71.899718][ T6134]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   71.902379][ T6134]  ? tomoyo_path_number_perm+0x46d/0x580
[   71.904723][ T6134]  ? stack_trace_save+0x8e/0xc0
[   71.906725][ T6134]  ? stack_depot_save_flags+0x27/0x9d0
[   71.909038][ T6134]  ? __lock_acquire+0x4a5/0x2630
[   71.911181][ T6134]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   71.913705][ T6134]  ? policy_nodemask+0xed/0x4f0
[   71.915811][ T6134]  alloc_pages_mpol+0x1fb/0x540
[   71.917893][ T6134]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   71.920140][ T6134]  ? find_held_lock+0x2b/0x80
[   71.921704][ T6134]  ? avc_has_extended_perms+0x33a/0x1080
[   71.923584][ T6134]  ? avc_has_extended_perms+0x33a/0x1080
[   71.925452][ T6134]  ? drm_syncobj_array_find+0x34/0x3b0
[   71.927266][ T6134]  ___kmalloc_large_node+0xe5/0x120
[   71.928945][ T6134]  __kmalloc_large_node_noprof+0x1c/0x70
[   71.930748][ T6134]  __kmalloc_noprof+0x5be/0x850
[   71.932338][ T6134]  drm_syncobj_array_find+0x34/0x3b0
[   71.934065][ T6134]  drm_syncobj_reset_ioctl+0x20b/0x370
[   71.935837][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.937800][ T6134]  ? drm_dev_exit+0x41/0x60
[   71.939311][ T6134]  ? drm_dev_exit+0x41/0x60
[   71.940783][ T6134]  drm_ioctl_kernel+0x1f3/0x3e0
[   71.942401][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.944473][ T6134]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[   71.946245][ T6134]  drm_ioctl+0x5e6/0xc60
[   71.947616][ T6134]  ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10
[   71.949503][ T6134]  ? __pfx_drm_ioctl+0x10/0x10
[   71.951121][ T6134]  ? selinux_file_ioctl+0x13b/0x290
[   71.953190][ T6134]  ? selinux_file_ioctl+0xb6/0x290
[   71.955390][ T6134]  ? __pfx_drm_ioctl+0x10/0x10
[   71.957500][ T6134]  __x64_sys_ioctl+0x18e/0x210
[   71.959597][ T6134]  do_syscall_64+0x10b/0xf80
[   71.961596][ T6134]  ? clear_bhb_loop+0x40/0x90
[   71.963672][ T6134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.966235][ T6134] RIP: 0033:0x7fcdf899cdd9
[   71.968136][ T6134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.976192][ T6134] RSP: 002b:00007fcdf6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   71.979745][ T6134] RAX: ffffffffffffffda RBX: 00007fcdf8c15fa0 RCX: 00007fcdf899cdd9
[   71.982720][ T6134] RDX: 0000200000000100 RSI: 00000000c01064c4 RDI: 000000000000000b
[   71.985859][ T6134] RBP: 00007fcdf8a32d69 R08: 0000000000000000 R09: 0000000000000000
[   71.989107][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.992274][ T6134] R13: 00007fcdf8c16038 R14: 00007fcdf8c15fa0 R15: 00007ffe3bccee78
[   71.995565][ T6134]  </TASK>
[   71.997699][ T6134] Kernel Offset: disabled
[   71.999504][ T6134] Rebooting in 86400 seconds..