last executing test programs: 13.120755253s ago: executing program 1 (id=2): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'wg2\x00', 0xca58c30f81b6079f}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x0, 0x0, 0x7, 0x0, 0xfff}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x2, 0x2, 0xffff8000, 0x2, 0x3}}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000000000001}}], [], 0x6b}}) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @private=0xa010102}}}, 0x108) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a80)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f00000033c0)=@ethtool_eeprom={0xc, 0xffff, 0xfffe}}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000140)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000019c0), 0x4000, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000e40)={0xf2, 0xb4fc2ce76ddb93e4, 0xe0000}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x7cba5f53f3d72509) lseek(r8, 0x10001, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000003c0)=@ng={0x4, 0x8, "34657058f68d"}, 0x8, 0x2) 13.036016165s ago: executing program 1 (id=7): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x1, r2, 0x10, r0}, 0x10) 13.012768255s ago: executing program 1 (id=8): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x90000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@nodevmap}, {@uname={'uname', 0x3d, 'security.selinux\x00'}}, {@loose}, {@cache_loose}], [{@hash}, {@fowner_gt={'fowner>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x36, 0x37, 0x37, 0x63, 0x36, 0x39, 0x66], 0x2d, [0x62, 0x35, 0x36, 0x33], 0x2d, [0x1e, 0x35, 0x64, 0x64], 0x2d, [0x62, 0x37, 0x66, 0x39], 0x2d, [0x64, 0x0, 0x51af33e7c6229342, 0x32, 0x36, 0x33, 0x33, 0x30]}}}, {@flag='rw'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise}, {@uid_eq={'uid', 0x3d, r2}}]}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) lseek(r0, 0x10001, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='/usr/sbin/cups-browsed\x00', 0x17, 0x2) 12.919802856s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12.918921706s ago: executing program 1 (id=11): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x20, 0x2}, [], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.788576648s ago: executing program 1 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0x1c97, 0x6, 0x1, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x104000000000000) 12.788455258s ago: executing program 32 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0x1c97, 0x6, 0x1, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x104000000000000) 12.484335133s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 12.418561354s ago: executing program 3 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.333563985s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1203000, 0x1400, 0x8, 0x3}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x1000, 0xffffffff80000001}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='huge=always,size=3tg']) open(&(0x7f0000000000)='./file0\x00', 0x511000, 0x100) 12.284395106s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12.283688616s ago: executing program 3 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000340)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a"], 0x30}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 12.232432667s ago: executing program 2 (id=23): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xa000, 0x0, 0x0, 0x0, 0x3ff, 0x801}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x40000000, 0x7f03) 12.231555796s ago: executing program 2 (id=24): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="3fe882a29e339018083130622f6aef02046e8f4f0b8c8407006eb23ab93b4b7cdd0925cef1db18e1fc7fde", @ANYRESDEC=r0]) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000840)={0xa3, 0x0, &(0x7f0000000800)}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0xf0, 0x28, 0xffffffffffffffff, 0x70bd2a, 0x3, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffe, 0xa6}, {0x936d, 0x3d49, 0x4000}, 0x0, 0x3503, 0xa, 0x0, 0x4, 0x60}}, 0xf0}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, r1}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x9d) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000007c0)=0x1c, 0x4) read$FUSE(r1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20, &(0x7f0000000640)={'trans=virtio,', {[{@cache_fscache}, {@nodevmap}, {@aname={'aname', 0x3d, '/dev/fuse\x00'}}, {@cache_readahead}, {@afid={'afid', 0x3d, 0x8}}, {@uname={'uname', 0x3d, '/dev/fuse\x00'}}, {@version_L}, {@cache_mmap}, {@access_uid={'access', 0x3d, r6}}, {@access_uid={'access', 0x3d, r7}}], [{@obj_user={'obj_user', 0x3d, 'loginuid\x00'}}, {@uid_gt={'uid>', r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/fuse\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}, {@measure}]}}) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000380)={0x14}, 0x14) 12.195188347s ago: executing program 3 (id=25): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x1, r2, 0x10, r0}, 0x10) 12.130850628s ago: executing program 33 (id=25): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x1, r2, 0x10, r0}, 0x10) 12.120947458s ago: executing program 2 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getgroups(0x3, &(0x7f0000000000)=[0xee01, 0x0, 0xffffffffffffffff]) setregid(0xffffffffffffffff, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.00961496s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 11.98787392s ago: executing program 2 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty=0xa00}, 0x10) syz_usb_connect(0x3, 0xcbb, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x24, 0x9f, 0xf6, 0x10, 0x104d, 0x3002, 0xa210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca9, 0x4, 0x8, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0xb9, 0x9, 0xc, 0x2e, 0xae, 0xc9, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0xe, 0x1001}]}, @hid_hid={0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xcbf}}], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x2, 0x5, 0xf}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x2, 0x0, 0xa8, [@generic={0x37, 0x5, "b91648af7c43550933a9e54effcca4a24e6f6da1009751a7189e484603da5bbbb5b32d1335bb525a7b7876d43ecfe1e5e1d0e30221"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x29, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x3, 0x7, 0x6, [@generic={0xdd, 0x2d, "cbd995294fee7752afc2e9eba872eb14f9d4f7f33ebcefaa35372d0ad3e145fa544f585d5718b779a874a04ea1e64311a899015ff1f534cc75416c961e9a4cba57e5b3e7032aaa7b789fceed76f25390ab8af8e62a38ec99e9eb420319d6d536eadee06b9634fabbf54e63e3e5f4f64105cb851cc44bcbff8fe1386575f9298043bc4103d6dfab09dc874f10c695dd7f7f40750827f910c9c5e5fbde61b17820e849bf86a7ea5180c79e44687d5d010c3047d279e77e4d95f14567107d9c1bbf320e2f30846e8ce75b7c37d966e25e12b474208ec91cb79a1cc562"}, @generic={0xd1, 0x11, "de1f2a82197845f4adf5abbe1c2c4030668d25d78c45898acd08991fb81ed7e47e2fc7827e8cb1402cc999272d2c9bf2d50e90416ccbfe2a8f0559efc8402dc604853d0386d05d2a30fbc54de3298da77e837723d325c3cdc9885516d6bcef429b8ff571d9aaeecb0b2accffe0f28741b1211229b366ae5a3dfed36d6f77d284d13fcf01b2fe4b54be05fc330507c236fbe007cb78db25ec44f7048438ddca7d985440fb7e9969b20e7e2ea1eb3a63529de580bcecaf0a90ac776e9f57952a7b20bf8b667aeb213766aa7c80eb2321"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x3, 0x9, 0x9, [@generic={0x3e, 0x8, "1c12c90fd01845ea97fb65195f1dc492d87e2c6d1d901fe54682bcc732eed92a3ff9a83e56bc5b92250e9a7d294f42423c730daec3f0f2c79a669363"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x40}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x9, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x62a6}, @generic={0x65, 0x31, "2b5627a04bf7875560208e13978173ec7c738e2b3a152dd1de2a6e8d880d71c006ffd0a8cae9f8d1ee4a56c78ffc358c7ef8079ecaff4be18d10a559ac254f662e25513d80b36bc9038d17d6ad8f13e4ba92f34864016bd65d06ed121eeaba7552a3e2"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x1, 0x1}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x4, 0x81, 0xb}}, {{0x9, 0x5, 0x8, 0xf, 0x40, 0x2, 0xfc, 0x3, [@generic={0x3e, 0x0, "3b3d094d6cbd6474e990acd52340343fdf1e4d133d93cea5c665ac5cbf21e10530d69fdf9f5d9fb327940a734a0191b54994155c51ecee2f2015fcde"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa0, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x80, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x3, 0xff, 0x4}}]}}, {{0x9, 0x4, 0x1b, 0x6, 0xc, 0x86, 0xbd, 0xbf, 0x9, [], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x2, 0x4, 0x1, [@generic={0x19, 0x3, "b69065825fdb9dcf3abfdbe2b0a90461521f0ad494efe8"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0xe7, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}, @generic={0xd6, 0x22, "9e3a4633c0da462e760a4a702b81f2a9576d1b5ee63f3e3989f6f69efce9e9279ade8bb8aff9d929108d2d7ab76c6e9ed385b8a23672666332a34005cec9b8b27dea6ae1c1737ee5e32aec7fed91494ff1e18d7645f8db1b4e8e1204a01512e6ac5e2ac40dfa6fbe5fc183e43c7f5e8b23f909ecf9d67621f075d38372073992052ff8a125a9e63c893dc0dfa8c86b0de8904ff086f11d7bccdbc101c337dd5b1771fb802ac5dea83abec9af503cd52d41b17779d3257d17125767df70d72c9d4879dab3ab2765c50d659bd727d5540277d5ac81"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x80, 0xff, 0x2, [@generic={0x89, 0x6, "99545c185ef071aa7b8f84429564d9b343fb769a2d484c84c1f6d2fb79ec137833a4afceb723b60f7198870dd27fb88b14e5263827f275069bf02c998985ff34cd61b9968bbcb111198648fcd812c0f2c5210bffa058921d480a94e90789592e2b7e3537255eab43ce7ca5660dd7faf293486e474dcc2ca9436bd5df16843818258346f3dfea9d"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x5, 0x75, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x0, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0xd, 0x7b}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x88, 0x5, [@generic={0xeb, 0x23, "4a42452f20888f5c4471ce004bedb5d23d2fd3e82a7e3c0580fc90bf95c601223e92d85008e4da177e93a49e570027e07ccbc7a1b5bce49f97cdf1909032586ee8abb762f265ae0827116692dcf0b591b27055f0cd23fe38892d0162ac8d7e88680cb8decb775a82aa7788599fac871b5608888923b8515d6fac8c3e9a7938141c0c846576c28dc75af4227a2958ab6085f79750bc2c9528bc13f7894040c617eb83f1c1c4e19f952a3bed1f90dd4913812463d62f24f363e68a1c4dae253111ae896332dbdbec82d413b768532efff9caf0c1c336399c6594913acce44516e94a9be62ae77b3ec8eb"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x3, 0x2, 0xa6, [@generic={0x2d, 0xf489eaa15fb9c87, "d174b4d39e610e29ad0a235c644ba543e7ab636c6d14a0df343f8c3530f3496ec253ce23045ec62bf6c649"}]}}, {{0x9, 0x5, 0xa, 0x1, 0xa89a7bc34fadc57a, 0x6, 0x9, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe68}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0x7, 0x83}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x7, 0x8}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x5, 0x2, 0x67}}]}}, {{0x9, 0x4, 0x7b, 0x9d, 0x9, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xb873, 0x7, 0x3, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x101, 0x38}, @mdlm={0x15, 0x24, 0x12, 0x7ff}, @mdlm_detail={0x3b, 0x24, 0x13, 0x4, "301de733a5d65c2bb50145b9a117acb35b75d07d0d893b87e96ece6c69f2d65ca74dcdfe768077fb07b6b74fb18d3a8cc013295df74af2"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x30}, @dmm={0x7, 0x24, 0x14, 0x4, 0x101}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xe5, 0x2}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0x5, 0x9, 0xa}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x3, 0x4, 0x8, [@generic={0x63, 0xf, "d22cff0082d64577e34be1782329685547815bf2b0595ac5e3e1208beb1fc40a8930ea9ac0196562ab42eb26a96fdf91592c69c37086b52e1be205bd2291b00899e50a7a7938378215022c0573d34021d4ba702bfa8a9eb5ed9c91b3801428edde"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5}]}}, {{0x9, 0x5, 0x9, 0x10, 0x600, 0x5, 0x3, 0xb, [@generic={0xd7, 0x5, "4edbeeed624f4e768280d921a9986050349ef79fb6cd441e675d032f526912e8f2ae8f2ffc2669f8c38a3f0ee94a77a5b81a48e0380eeddcbf2c07c0ed6287cb3d304e9a4db0a1c72815ff400b01c0b230783be0f1bfc8f1ada32de9a6481ff785e882686701c8974edb3f3c73b5e007e5ff7bc9ca61a86f074a63eca93dba9336fe586acecd37c2387b4a6255fb20ca8a14fcb581cf70df3bd0633af813b6a6f70c45710fa6c9ab0f4f8d8f3b6ee98d721a43b8c94b95b52d63d3b0dd41eca4b6eb4da376679f355133275356a0c8013b26fc9def"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x9, 0x7, 0x45}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x31, 0x5, 0x1, [@generic={0xf7, 0x5, "71915d5ceb9ff404dd5ebd5ecfd4b578c33dba2ee453afcb89095b438a71f7e7064dc6c7f75819e40eabf0a58886dbeb523fa402c7a419d67dcb6bda5a60daffbe7207d04810526f6227a07d35db1eca1515a924801df80afdd9acded54eccd6e43a57dd86415374fb03c6d436c244fbd2c0a8efa18fb4520acc1c7f456d9ceb81a3da695b02ebd3b57aca66a4607ca1f37eb58f225a9ccb9a178bb5b5870b8bf890732d445cee007b454643b84b21db2c11afb529016b55fafd6da89627c0fafb341547de41bf8d0bc557e737af28b67e9bfa9c20e36b025e350e114f2399db5c280a08e629f2a577f22acec530c1a30ab8b7fa0a"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x4, 0xbd, 0x8, [@generic={0x5f, 0xe, "01c75a733673bde5fa386cd5847564fa87a6995463377fd3115613cb6dea068d99d4e190096a2386a567b26bb8cd2aa9d75c809894b168a861870d5ac7574b7af985281844fb8d9205eab88c08a8053f478f6123484128fee60c8f43e4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}]}}, {{0x9, 0x5, 0x90da755c35ed4469, 0x0, 0x400, 0xa7, 0x3, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0x80, 0x7, [@generic={0xd3, 0x23, "f3b0d789630fa3a61eb718cea92beab74677cfb665bfbbaaf3195be6ef06dd69943cf705ff61eb6941685a61f48911ca2161ee646d4e37b4af1bccac47a19d6d5be190e3bd50216cf0c28a900eef5d9c3dd5b254537d30203affd0822b5b685950acb44f0266a45b9d03bdc123031002eb8722d3dd0c47257a27367d48edddf57f505cad3fe5cab9972b01f3bdc3e246284f3d5e8ef314d0931afc274edc27ea3f9a41e2f4b780e86c85bf10f243ccdb483a6bffd7beee33c1cb0ae7f33708502cf6bc8b1743eb6e90964437663fee45e9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x1, 0x5, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xd7}, @generic={0x93, 0x6, "3c71f84d4da2247a9a595ba5c3a3c7399e17fca265d031ab06ff623f3a361301b5939396a84cfffcce93ff6829555c289f58a863207b7032a51eec5e44832ae29c3a8e3f4d9341f35f32bb135c65ed37f9668266c758cb45a7fee66ac1738ce4126364b0f42aeec930a616c9a613ab99ced1284db9490df4cc54a10b7e206abc0fc2619632ca261f23791df92dc84d30fa"}]}}]}}, {{0x9, 0x4, 0xdd, 0x1, 0x5, 0xcc, 0xb6, 0x8, 0x42, [@generic={0xd1, 0x4, "246aeffa1f93f1824c36ffcee0d3b14376bb5e6ba266678bcbb9b9d4574499710a42ba0b8fca5f7f83e9d37c7eba04db040801958813b627dd003d510e4328a3bcc5ae6972ed84676a63d2c8429ab9f8d5db0295ded7b9eb8035190f224a1db22027958c8a5d8da34b98493a9e6f5541fa8d10d9c41e0bfe0685fa20063ad028b917a4c3fa635ba3ff0e86772a4aa052650b08cd5222cba1bf0a9ba86f6a1d78ad7dd494eda70a0db88fea66c8b0a2e5997dead4e20590d7ef40dd521d2c1786ef9a174150b0796a4ea79f5bb6f48b"}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0x5, 0x5, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5f, 0x9}]}}, {{0x9, 0x5, 0xc, 0x12, 0x40, 0x27, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x88, 0x8, 0xe}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xf9, 0xc, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x0, 0x3, 0x7, 0xc}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x7, 0x3, 0x3, 0x40}, 0x12a, &(0x7f0000000d80)={0x5, 0xf, 0x12a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "e13e47a8b5f15a6c32da38c587c23d15"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b4f1e2a85d42b9a9f284bae37a794727"}, @generic={0xc9, 0x10, 0xb, "f30f2ee29af96b1c4a789db1118c5f42004851772f41318b15c067dc65d3ad85786ab0b2ab4e0afd62b552a76307e2e13ce1a8b64cde489b9b834c7d8898cabb8287a57126a3e024c3a17d79303c7c2f46172ac31f137b226a006be77d8742827e117a5ecf638a024973e45dda7af682841a33ab984bdbbc4da424702165bcb090d48bc86ebd3de556a7e4ee8fcb52abbb75e209ce5da1695d7ba5efb88df66739c867c28eeb27a992f13fa9405069c19b1599e34fb07d5940656b14d5dfc8eb7ca75e2e25ca"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ea0ce97df37791352a16d4b6d307b13d"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x0, 0x0, 0x8, [0x1fec0a0, 0x0, 0x3f00, 0xffc0, 0x3f30]}]}, 0x6, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x1604}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x401}}, {0x40, &(0x7f0000000f40)=@string={0x40, 0x3, "821e207aa0f6d92ce53591a0a674c1489a92f415c5dfe28228deac976d6cb54664243cf173c7c14720eb34c729de26840c041a4498d63bb997bb9a326637"}}, {0x8e, &(0x7f0000000f80)=@string={0x8e, 0x3, "83a47406df3ba22d97c200ac66d1dfbe6f8b96f6a80ee3c1acf6326b2b353053210eee25923326640000e5ed7d3f5cd5a2a205006e571e3203e7fd0af0e2726911136b7598e4feaf7e4ebc9f611cc64f8f8a6a911fb8365c04fc2b5034b208324b592e691a9085ea1bac7934c07b31f2ee3983d271400638e6426e11ca64275fcd65df721a1293b3ddcd3e4e"}}, {0xd6, &(0x7f0000001040)=@string={0xd6, 0x3, "453a240f6423d1ad2206e2f77463aee52f97dc7c89683d729a394da8595659f83e58f001726b97d0d49c8b779e58151076698987b2fd9b4bed079a5db7924c02159961f6775ed243b232d40448e3e46b4507116e97e84588fc401a3abecfd5ee9dc2d2bea9d53ddc2b30c007c0eeacd191761fd6551b0717baff02892253310faa48542aa3dd20a6c8fe7ddcace90a818f9e1119120f4ea92a7d75eea947aab2f0727927dba60ac1db7bdc6f015a90813bede1bdbcfc42a2244db9bb81b7fe3280d1a95bef8be39e0e190f4b1c91a9585de80bfa"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x861}}]}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6e0}]}) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 11.867265042s ago: executing program 2 (id=33): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x20}, 0x6}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x2) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = accept(r4, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r8, 0x0, 0xffdd) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x270100, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8f86f138b66efbafc0ced0f20c06635000000200f22c0a1c60026660f38143af26690ba4300b80000efb87f068ee00f40020f01f9baf80c66b8c381a08066efbafc0cb000ee", 0x4a}], 0x1, 0x60, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @cstype0={0x4, 0x9}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.826226893s ago: executing program 34 (id=33): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x20}, 0x6}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x2) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = accept(r4, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r8, 0x0, 0xffdd) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x270100, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b8f86f138b66efbafc0ced0f20c06635000000200f22c0a1c60026660f38143af26690ba4300b80000efb87f068ee00f40020f01f9baf80c66b8c381a08066efbafc0cb000ee", 0x4a}], 0x1, 0x60, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @cstype0={0x4, 0x9}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.092539883s ago: executing program 5 (id=181): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cbdfda0f20d86635200000000f22d8f30f38f63b2e0fc7b40000673e660f2c55040f20e06635000400000f22e00fc72a650fc7590766b8000800000f23c80f21f86635000060000f23f8", 0x4c}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x250de0}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.092186923s ago: executing program 5 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a9"], 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3.018872664s ago: executing program 5 (id=183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000003000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500"], 0x23c}}, 0x0) 2.995732484s ago: executing program 5 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.976792135s ago: executing program 5 (id=185): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$KVM_CREATE_VCPU(r0, 0x770a, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000000780)={&(0x7f00000002c0)="6c073faab3d50e2c54", 0x9, &(0x7f0000000700)=""/77, 0x4d}) ioctl$TCFLSH(r10, 0x540b, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r11, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x374, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x136a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-h{[!\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\&\xde:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^)\xc3\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',*+-\':^+#$\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "398cd6e3"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x93eb}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "0d4e7304604bc8a0e63530a9343d6c13ef4bdfc16095e1aff785d9d50b46c2e38d71e413bfa9a25b0d8cb12d7830f3304da771378208912c00e3dff198258a9dfeae21c3c5f2991207ed57d150833e0a1bc133aa003501f7dbdaa405c5e0695e6dd6003a810cd1d06a182c8859bf7de47f546f0d665938285ea1a502c382b2eccae82501fc9138c2bb98ea5876596012697bf7d4fb7683dde42ed14a0261ab7f275b43845a795137a18addab4c84e20c2e548871ed"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+*\xbf#}(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 2.912245815s ago: executing program 5 (id=186): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000080)='./control\x00', 0x20) read(r5, &(0x7f00000003c0)=""/212, 0xd4) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[]) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x200203, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x450001, 0x3c7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc71f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x7e, [{{0x9, 0x4, 0x0, 0xf1, 0x1, 0x3, 0x1, 0x0, 0xd, {0x9, 0x21, 0x189, 0x7, 0x1, {0x22, 0x701}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xdd, 0x5, 0x2}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x81, 0x0, 0x1d, 0xff, 0x4}, 0x42, &(0x7f0000000c00)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "ba4ee0aea3877c99a771ad5acdcc6b1c"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9abbe57154ac5b7e7a8e0b8c437613fc"}]}, 0x14, [{0xb3, &(0x7f0000000800)=@string={0xb3, 0x3, "5c96232d3636c9bb9c21520724d47180d2b8f7b250929ae4b95dd778095c19076c5cc543f1629c69411f7778f0278f5beb3403fda6374dd0aceaa402fa684c51f76c9008e80cff9aecf9cb74f3143fbd0b5cf16d1306bdb351c3f3fd61d022984df96ece7662fa224ea21e825cf054290bfc01fd83a37de64d47f80eaa2948a7dea303f3e527f1c82b148ab8205eb6c2b65bdb88caf277f7694804a675fcaf080f2494b1546ce67e9c7933d4f9df5c5155"}}, {0x1a, &(0x7f0000000240)=@string={0x1a, 0x3, "f8ea627e309e5bc0ba486209299d17ca7ae11241f03470fd"}}, {0xe8, &(0x7f0000000940)=@string={0xe8, 0x3, "6b91276a4b1344c4d87328fe50a465def76b174c611531d02257273683d1b2b1fe7ea53de1cbda737f7f99bbe5200ee95056d95419c6a03dc8ab27cb939be3df35ad68a5d6849a61b39791c816bf288e823e673c9199377e8e98c2c20dc3acaf053f09a6cbfb0fea642feb823a1a5ef74cec067248af97d726c4be73f2d4ad82f54e7cff22800bf441b805a253f135baf0945d8e8dc691c8bd9289c1cb7cf413f21773ce820fa2ed34898afe09cce632f493d5efa634e93d929df77d16dd37747e475d0989925baf5871c793934287202eadff0f11c496b467b62207cfbc877260b36032df7e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x6c2f}}, {0x57, &(0x7f0000000340)=@string={0x57, 0x3, "cc57266f99c5c53e2d14f6f86a8bef5985deffed5888b19d56e653ef350a15cbc577b5b029528eb1dc3c4d2f561b0c6f4e1a57845e22978ee0d2e829820f64dc27f10ccc5d1e030fc13079c0913b130316a8f92eaf"}}, {0xba, &(0x7f0000000a80)=@string={0xba, 0x3, "b22dfefcb6767902724e16d4f55f414747646bdb2d73fba56d1b790fdc68e7e2c7a1a0ed4f802ced07678ff5152a7845eda24083ec59ad5d3db0494ab93f16137f1c983f1bde08851dcee090726877695104b76c95b575d169a2a3a6cbef2d4f45846f545093db74416243f0298fc5562127f183093efe4dab39530c432eb15ab293222da7d3be1617541e1c65c64c4cc3ee777d89a5744bd3c23a85b971f565e8ef5ca8502103ebecc076a6c8ef504db8d1ad3288bcf61f"}}, {0x5d, &(0x7f0000000b40)=@string={0x5d, 0x3, "c089d72805c73d39d1e2ec52078b5d69ccd6347bb17c611db8b5a77cc64a14b75ba44d05e600566d7dcc8fbbe48854889c6ff59b745b25dc4615ac5da1d2f6c6746762a89f48832a5e17354295e33e83eae306a74a019b9e2a624f"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xcd, &(0x7f0000000d00)=@string={0xcd, 0x3, "79ba0f0124a36de6eac1d5afe1e399275a652fcbcdca4ee67c3ecdb7a1f8fb768c3a08323b4251d5fbc37694340eb04d716b75b7676e9ac3ade9830b95340e570688d6544538b76df4bd7ae82f561d1bc50da54f89529dbdf444fc78feb1cb8f81a963b253893d23bb51ed87cf46bc884308d46cbe72fcfb1793762ba0fbc82d316755a64692fe43b0b5842b05edd060b18882be1befb668d2c39e7ecd3359d4b389bfa26fda06fe7dc42629d50cde66bf0e16629faaa5c83cddf662b016f954f429ed9665a19ea4da6cc5"}}, {0xc, &(0x7f0000000e00)=@string={0xc, 0x3, "565574b6cdab9634076c"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}, {0xe5, &(0x7f0000000fc0)=@string={0xe5, 0x3, "d93e4ae1faaaf3a5e1ceabb024ca2a2b37701edc581463b00be9673d88e72d406586384a97dda261c721403e68f01201952e0e8258fe329c956c5ba97512f510b3f9e1c585d00642cdc18f801814ff518a71f2709b07e2f13e2aa3d89a6b14b885bf257e46cd8288f2570b28c2c263a3fbc28770710335188ed801016f432dd0152b0cae007049c0d5e7e1a64f230589f616e5b2146da7c5ef7b07d96b799a25e361603476deeb3ae4e8637aed6197798dc8b2a48ef05c0f7d426e186245faa9e12fb13d8487f61dc4b114cac844115b54a18c2335854875ff4bb8f80ebb0da9dcaef6"}}, {0x24, &(0x7f00000010c0)=@string={0x24, 0x3, "6e39201b9cdcf0a255df0d4ae9ba457020b57050eb7ba069bf4b0615a03db4dad975"}}, {0x43, &(0x7f0000001100)=@string={0x43, 0x3, "9886a71ed8a4115236418ec8cca2a8cf2267aff1dbae934b9f52d925656f0fc0234012e8d1000d86c46dabb03924f521c31100"/65}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000700)={0x24, &(0x7f0000000540)={0x0, 0x11, 0x44, {0x44, 0xa, "c112953730a2db4fd2070f357971668435921d8ba6ab0eedbc8ce7e661e015f35ed1f9caa50677c2c764e6453b31d89b1a7e142f7eacb8a1de74a4cb1c2a375aa441"}}, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00038e0000008e03dd8d4a800444d9b88876fa151683cb1b63df923e88e5bf379106f12d7706111e4e6a2d489b9cee292e98f8ca300a862b40037e2a08d9e9fe62bbe4fdd33244b5392295e9a9633ee221c6b1fe4ad66f8af002ddd1eaaf45f8c19ced069fe93a23434d7ab1cee937dc8948f5e631329bb8d64bc4229b69c7115ec2a901fbc62c6dcfe67008e759a5a5be51232b9d20092a23ae1ed125f4308640756db3fef2b2e29a2e0a6f0bfa2ce0"], &(0x7f0000000680)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x8, "150bd770"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x8, '\tY'}, @main=@item_4={0x3, 0x0, 0x9, "5065af44"}, @main=@item_4={0x3, 0x0, 0xb, "044ba33c"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xc5f}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x0, 0xe, 0xc, "2cd069bebefc5caebff61bb2"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x64}, &(0x7f0000001300)=ANY=[@ANYBLOB="20018d00000044b1351960a784e86fa0ebc5780983e7f7c99063804d95a918e5c70a4f590f7f6a2fbbcdc723b71bc7f96796aed7c03ed7b404fb726e87d0e91f95281b16ca5b7a4b64a8d18d4ff819f0cb5c332fa58ed5938f7d452c8d5663b30003fe3b6e766d0820971eae5597d39da173ecd67289319ae6b3e50cb0ac14adfac780351f2692e1834ea810f05ab0bfe7ce687c7f7e18954279f1e59ae13c193de8293c196fc4c624f7a442fd05ba496f9d3311cabfd7a91972faeb99eb04"], &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x9}}) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020400) socket$inet6(0xa, 0x80001, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000002c0)={@private1, @private0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0x0, r10}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r10}) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) 2.116551768s ago: executing program 4 (id=191): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cbdfda0f20d86635200000000f22d8f30f38f63b2e0fc7b40000673e660f2c55040f20e06635000400000f22e00fc72a650fc7590766b8000800000f23c80f21f86635000060000f23f8", 0x4c}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x250de0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.115728758s ago: executing program 4 (id=192): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 2.102927058s ago: executing program 4 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.084757078s ago: executing program 4 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, 0x0}], 0x1, 0xe0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 806.898617ms ago: executing program 0 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000030000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d"], 0x23c}}, 0x0) 794.094838ms ago: executing program 0 (id=210): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cbdfda0f20d86635200000000f22d8f30f38f63b2e0fc7b40000673e660f2c55040f20e06635000400000f22e00fc72a650fc7590766b8000800000f23c80f21f86635000060000f23f8", 0x4c}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x250de0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 785.508438ms ago: executing program 0 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0xce7, 0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 751.552398ms ago: executing program 0 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 751.170588ms ago: executing program 0 (id=213): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) fallocate(r0, 0x40000000, 0x11, 0x1afd) 695.825869ms ago: executing program 0 (id=214): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0xfd41, &(0x7f0000000340)={0x20, 0x1, 0xfffffffffffffc6b, {0x16, 0x24, "ab61c17ddc3fcb0bc4e9d03c9442b5e37b95f35e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) lseek(0xffffffffffffffff, 0x3, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000002b80)) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2723000000000000290700000300000037ebdbb5671f5da13427ab5e1245f11bd9e31be0817f0f2647b12de72b7235970772faf3e472534905d388b448126dda6d767061f275396e058368e15a140377eaa53deff94ecf380eed98e0fdba2a52810cc932dac9dca5f817712e6154649ffb4d2bee5b1e"], 0x10}}], 0x1, 0x4044084) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xc002) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x806, r3, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000240)={0x1, 0x1, 0x7f, r3, 0xe}, 0xc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x2, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x2, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 689.809149ms ago: executing program 6 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000fffff0000000000000000000000000000e0000080a400098041000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 661.232289ms ago: executing program 6 (id=217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x81}], 0x1, 0x2100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180), 0x4) lseek(r1, 0x2000, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7bd4, &(0x7f0000000040)={0x0, 0x2295, 0x10, 0x1, 0x3b1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000140)=0x1, 0x0, 0x4) read(r0, &(0x7f0000000280)=""/44, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) ioctl$TCFLSH(r4, 0x540b, 0x0) 432.505643ms ago: executing program 6 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = fsopen(&(0x7f0000000200)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f000005f000/0x3000)=nil, 0x3000}, 0x1}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x200}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in=@broadcast}}]}, 0x10c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 432.130483ms ago: executing program 4 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cbdfda0f20d86635200000000f22d8f30f38f63b2e0fc7b40000673e660f2c55040f20e06635000400000f22e00fc72a650fc7590766b8000800000f23c80f21f86635000060000f23f8", 0x4c}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x250de0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 425.026043ms ago: executing program 6 (id=220): memfd_create(0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0xc1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file1\x00') 414.702863ms ago: executing program 6 (id=221): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x100000) 0s ago: executing program 4 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes